iceweasel-oai 2c9e1a5775
Add managed network policy support to the Windows MXC sandbox ( #44872 ) ...
## What changed
Add `create_command_args()` to encode argv, permissions, policy cwd, and optional managed network context through the existing bounded environment transport.
For managed networking, generate a policy that allows IPv4 and IPv6 loopback while denying direct non-loopback egress and general inbound access. Require nonempty, nonzero proxy ports and reject `allow_local_binding=false` at both launcher and policy boundaries because native host-loopback access is bidirectional.
Document the MXC launch contract, platform requirements, and limitations.
## Testing
Add portable tests covering managed network transport and policy translation, plus rejection of missing proxy ports, zero ports, and unsupported local-binding restrictions at both boundaries.
GitOrigin-RevId: 8d31b98f94a2ba3769369aa50de8e53dc143bac4
2026-09-11 17:19:23 +00:00
2026-07-29 13:53:15 +00:00
2026-09-05 18:06:26 +00:00
2026-07-23 19:19:35 +00:00
2026-08-24 22:40:35 +00:00
2026-09-10 17:03:11 +00:00
2026-07-29 13:53:15 +00:00
2026-09-11 17:01:17 +00:00
2026-09-07 19:34:23 +00:00
2026-09-09 20:39:33 +00:00
2026-09-11 17:01:17 +00:00
2026-07-30 19:47:30 +00:00
2026-09-03 06:02:25 +00:00
2026-09-10 13:02:57 +00:00
2026-08-20 08:10:08 +00:00
2026-08-31 13:44:12 +00:00
2026-08-31 13:44:12 +00:00
2026-09-03 23:20:54 +00:00
2026-09-09 03:17:48 +00:00
2026-09-02 21:50:51 +00:00
2026-09-07 16:55:06 +00:00
2026-08-14 05:03:39 +00:00
2026-08-17 22:37:14 +00:00
2026-09-11 14:25:56 +00:00
2026-09-10 21:41:39 +00:00
2026-09-03 01:46:37 +00:00
2026-08-28 19:44:50 +00:00
2026-09-11 17:00:07 +00:00
2026-09-11 17:00:07 +00:00
2026-09-11 17:00:07 +00:00
2026-09-11 17:00:07 +00:00
2026-09-10 10:31:15 +00:00
2026-08-18 23:47:00 +00:00
2026-08-13 23:13:37 +00:00
2026-09-11 01:57:54 +00:00
2026-09-11 14:25:56 +00:00
2026-09-05 01:25:06 +00:00
2026-09-11 14:25:56 +00:00
2026-08-31 21:27:51 +00:00
2026-09-10 21:51:34 +00:00
2026-09-04 23:56:25 +00:00
2026-09-11 17:03:21 +00:00
2026-09-11 01:57:54 +00:00
2026-09-11 14:25:56 +00:00
2026-08-07 11:30:17 +00:00
2026-09-05 12:17:32 +00:00
2026-09-11 17:08:59 +00:00
2026-09-10 22:17:03 +00:00
2026-09-07 16:55:06 +00:00
2026-08-17 04:37:50 +00:00
2026-09-11 16:41:56 +00:00
2026-09-10 18:24:13 +00:00
2026-09-11 17:08:59 +00:00
2026-09-10 18:10:26 +00:00
2026-07-31 21:37:56 +00:00
2026-08-27 20:44:47 +00:00
2026-09-06 20:52:29 +00:00
2026-09-10 16:02:36 +00:00
2026-09-09 23:23:59 +00:00
2026-09-10 00:26:30 +00:00
2026-09-08 19:40:43 +00:00
2026-09-01 15:12:53 +00:00
2026-09-09 19:43:41 +00:00
2026-09-10 23:15:48 +00:00
2026-09-09 20:32:57 +00:00
2026-09-10 03:18:28 +00:00
2026-09-10 21:41:39 +00:00
2026-09-10 03:18:28 +00:00
2026-09-11 17:19:23 +00:00
2026-09-09 17:45:17 +00:00
2026-07-30 04:26:36 +00:00
2026-09-09 15:48:39 +00:00
2026-09-01 17:17:45 +00:00
2026-09-10 21:51:34 +00:00
2026-08-25 15:50:19 +00:00
2026-09-11 17:01:17 +00:00
2026-09-11 03:16:01 +00:00
2026-08-26 17:45:42 +00:00
2026-08-21 16:45:05 +00:00
2026-09-10 20:50:10 +00:00
2026-09-10 18:24:13 +00:00
2026-08-28 01:14:02 +00:00
2026-09-10 22:17:03 +00:00
2026-08-10 15:43:10 +00:00
2026-09-09 06:04:59 +00:00
2026-09-09 04:00:10 +00:00
2026-09-05 05:21:42 +00:00
2026-09-09 23:23:59 +00:00
2026-09-02 18:34:27 +00:00
2026-09-08 04:35:21 +00:00
2026-09-11 17:01:17 +00:00
2026-09-09 23:46:17 +00:00
2026-09-11 17:08:59 +00:00
2026-09-02 18:42:06 +00:00
2026-09-08 00:13:28 +00:00
2026-09-11 00:03:40 +00:00
2026-07-22 16:18:08 +00:00
2026-09-11 03:16:01 +00:00
2026-09-03 20:01:07 +00:00
2026-09-10 22:17:03 +00:00
2026-09-02 22:19:51 +00:00
2026-08-15 14:31:04 +00:00
2026-09-08 23:37:26 +00:00
2026-09-08 21:19:02 +00:00
2026-09-11 17:19:23 +00:00
2026-09-10 13:02:57 +00:00
2026-07-28 20:49:22 +00:00
2026-07-29 13:53:15 +00:00
2026-09-11 06:45:09 +00:00
iceweasel-oai
2c9e1a5775