iceweasel-oai a603d7ca5c Honor the configured Windows sandbox level for managed networking (#37875) ...

## Why

Managed networking implicitly selected the elevated Windows sandbox backend,
even when the sandbox was configured to use a restricted token.

## What changed

- Select the Windows sandbox backend solely from `WindowsSandboxLevel`.
- Reject managed networking with a restricted-token sandbox before spawning a
  process, since managed networking requires the elevated backend.
- Cover the rejection through sandbox preparation, unified exec, and Windows
  sandbox session tests.

GitOrigin-RevId: 308858652d7b629af623d22896dafde3a23d3758

2026-08-10 19:57:40 +00:00

..

bin

Harden Windows elevated sandbox startup (#34629)

2026-07-21 22:36:18 +00:00

conpty

Terminate Windows process trees with job objects (#34624)

2026-07-21 22:07:09 +00:00

elevated

Harden Windows elevated sandbox startup (#34629)

2026-07-21 22:36:18 +00:00

unified_exec

Honor the configured Windows sandbox level for managed networking (#37875)

2026-08-10 19:57:40 +00:00

wfp

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

acl.rs

Harden Windows elevated sandbox startup (#34629)

2026-07-21 22:36:18 +00:00

allow.rs

windows-sandbox: pass workspace roots to runner (#24108)

2026-05-28 15:26:55 -07:00

audit.rs

windows-sandbox: remove SandboxPolicy runner plumbing (#23813)

2026-05-26 14:56:27 -07:00

cap.rs

[codex] Scope Windows sandbox write-root capability SIDs (#21479)

2026-05-13 18:28:52 +00:00

deny_read_acl.rs

feat(sandbox): add Windows deny-read parity (#18202)

2026-05-11 23:04:28 -07:00

deny_read_resolver.rs

Skip missing paths in filesystem sandbox entries (#34598)

2026-07-21 19:17:18 +00:00

deny_read_state.rs

feat(sandbox): add Windows deny-read parity (#18202)

2026-05-11 23:04:28 -07:00

desktop.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

dpapi.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

elevated_impl.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

env.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

helper_materialization.rs

Run fs helper through Windows sandbox wrapper (#28359)

2026-06-17 10:00:42 -07:00

hide_users.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

identity.rs

Preserve Windows sandbox proxy settings in guardian sessions (#35036)

2026-07-23 23:35:29 +00:00

lib.rs

Preserve Windows sandbox proxy settings in guardian sessions (#35036)

2026-07-23 23:35:29 +00:00

logging.rs

Attach Windows sandbox log to feedback reports (#24623)

2026-05-26 15:59:25 -07:00

path_normalization.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

proc_thread_attr.rs

Terminate Windows process trees with job objects (#34624)

2026-07-21 22:07:09 +00:00

process.rs

Terminate Windows process trees with job objects (#34624)

2026-07-21 22:07:09 +00:00

resolved_permissions.rs

Skip missing paths in filesystem sandbox entries (#34598)

2026-07-21 19:17:18 +00:00

sandbox_utils.rs

[codex] Fix Windows sandbox git safe.directory for worktrees (#21409)

2026-05-06 14:08:45 -07:00

setup_error.rs

Improve Windows sandbox setup refresh diagnostics (#26471)

2026-06-04 16:52:10 -07:00

setup.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

spawn_prep.rs

fix(windows-sandbox): allow deletion in writable roots (#31138)

2026-07-08 15:05:57 -03:00

ssh_config_dependencies.rs

Filter Windows sandbox roots from SSH config dependencies (#18493)

2026-04-19 14:58:33 -07:00

stdio_bridge_tests.rs

Extract shared Windows sandbox session runner (#28357)

2026-06-15 18:30:48 +00:00

stdio_bridge.rs

Extract shared Windows sandbox session runner (#28357)

2026-06-15 18:30:48 +00:00

token_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

token.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

wfp_setup.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

wfp.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

winutil.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

workspace_acl.rs

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00

wrapper_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

wrapper.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00