mirror of
https://github.com/openai/codex.git
synced 2026-11-13 06:45:07 +00:00
johnl-oai
c4ea7294b9
## What changed - Add a Windows sandbox service validator that loads managed configuration while impersonating the provisioning client. - Reject elevated sandbox or network settings that conflict with managed requirements, including local binding and HTTP or SOCKS proxy-port restrictions. - Add a one-shot cloud configuration loader that bypasses the disk cache so policy checks use a fresh backend response without modifying cached configuration. - Keep the provisioning integration disabled until authenticated transport can supply the policy inputs. ## Testing - Cover elevated sandbox restrictions, disabled networking, local binding, proxy-port classification, malformed policy, impersonation failure, and cache bypass behavior. GitOrigin-RevId: b76aa8959c515c6507c2eaf61af768efa1305253
50 lines
1.2 KiB
TOML
50 lines
1.2 KiB
TOML
[package]
|
|
name = "codex-windows-sandbox-service"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
|
|
[lib]
|
|
name = "codex_windows_sandbox_service"
|
|
path = "src/lib.rs"
|
|
doctest = false
|
|
|
|
[[bin]]
|
|
name = "codex-windows-sandbox-service"
|
|
path = "src/main.rs"
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[dependencies]
|
|
anyhow = { workspace = true }
|
|
codex-cloud-config = { workspace = true }
|
|
codex-config = { workspace = true }
|
|
codex-core = { workspace = true }
|
|
codex-windows-sandbox = { workspace = true }
|
|
tokio = { workspace = true, features = ["macros", "rt", "sync", "time"] }
|
|
|
|
[dev-dependencies]
|
|
toml = { workspace = true }
|
|
|
|
[target.'cfg(windows)'.dependencies.windows-sys]
|
|
version = "0.52"
|
|
features = [
|
|
"Win32_Foundation",
|
|
"Win32_NetworkManagement_NetManagement",
|
|
"Win32_Security",
|
|
"Win32_Security_Authorization",
|
|
"Win32_Storage_FileSystem",
|
|
"Win32_Storage_Packaging_Appx",
|
|
"Win32_System_Com",
|
|
"Win32_System_Environment",
|
|
"Win32_System_EventLog",
|
|
"Win32_System_IO",
|
|
"Win32_System_Memory",
|
|
"Win32_System_Pipes",
|
|
"Win32_System_Services",
|
|
"Win32_System_SystemServices",
|
|
"Win32_System_Threading",
|
|
"Win32_UI_Shell",
|
|
]
|