iceweasel-oaiandGitHub 14de492985 copy current exe to CODEX_HOME/.sandbox-bin for apply_patch (#13669) ...

We do this for codex-command-runner.exe as well for the same reason.
Windows sandbox users cannot execute binaries in the WindowsApp/
installed directory for the Codex App. This causes apply-patch to fail
because it tries to execute codex.exe as the sandbox user.

2026-03-05 22:15:10 -08:00

..

bin

Elevated Sandbox 3 (#7809)

2025-12-11 13:51:27 -08:00

acl.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

allow.rs

Protect workspace .agents directory in Windows sandbox (#11970)

2026-02-17 09:40:46 -08:00

audit.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

cap.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

command_runner_win.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

cwd_junction.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

dpapi.rs

use machine scope instead of user scope for dpapi. (#9713)

2026-01-22 16:40:13 -08:00

elevated_impl.rs

copy command-runner to CODEX_HOME so sandbox users can always execute it (#13413)

2026-03-04 01:31:37 +00:00

env.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

firewall.rs

error code/msg details for failed elevated setup (#9941)

2026-01-27 23:06:10 -08:00

helper_materialization.rs

copy current exe to CODEX_HOME/.sandbox-bin for apply_patch (#13669)

2026-03-05 22:15:10 -08:00

hide_users.rs

best effort to "hide" Sandbox users (#8492)

2026-01-05 12:29:10 -08:00

identity.rs

copy command-runner to CODEX_HOME so sandbox users can always execute it (#13413)

2026-03-04 01:31:37 +00:00

lib.rs

copy current exe to CODEX_HOME/.sandbox-bin for apply_patch (#13669)

2026-03-05 22:15:10 -08:00

logging.rs

fix: handle utf-8 in windows sandbox logs (#8647)

2026-01-26 15:11:27 -08:00

path_normalization.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

policy.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

process.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

read_acl_mutex.rs

speed and reliability improvements for setting reads ACLs (#8216)

2025-12-17 15:27:52 -08:00

sandbox_users.rs

error code/msg details for failed elevated setup (#9941)

2026-01-27 23:06:10 -08:00

setup_error.rs

Include real OS info in metrics. (#10425)

2026-02-05 06:30:31 -08:00

setup_main_win.rs

copy command-runner to CODEX_HOME so sandbox users can always execute it (#13413)

2026-03-04 01:31:37 +00:00

setup_orchestrator.rs

copy command-runner to CODEX_HOME so sandbox users can always execute it (#13413)

2026-03-04 01:31:37 +00:00

token.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

winutil.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

workspace_acl.rs

Protect workspace .agents directory in Windows sandbox (#11970)

2026-02-17 09:40:46 -08:00