iceweasel-oai 1bc8fb16ae Separate Windows sandbox provisioning from ACL refresh (#42309) ...

## What changed

- Limit elevated interactive setup to provisioning sandbox identities and proxy settings; do not include caller workspace or ACL roots in its payload.
- Always run the non-elevated setup refresh during sandbox activation so the current permission profile supplies read, write, and deny paths, including when provisioning was completed previously.
- Add an `interactive-provision` setup mode that performs provisioning without the full ACL setup path.

## Testing

- Verify elevated provisioning payloads contain no caller ACL roots and use the new mode.
- Verify the setup helper accepts `interactive-provision` payloads.

GitOrigin-RevId: 081b1b43abd2388773c230fb35da82896e7be2ea

2026-09-02 16:49:45 +00:00

..

bin

Separate Windows sandbox provisioning from ACL refresh (#42309)

2026-09-02 16:49:45 +00:00

conpty

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

elevated

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

unified_exec

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

wfp

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

acl_tests.rs

Propagate Windows sandbox ACL update failures (#39279)

2026-08-18 20:56:10 +00:00

acl.rs

Propagate Windows sandbox ACL update failures (#39279)

2026-08-18 20:56:10 +00:00

allow.rs

windows-sandbox: pass workspace roots to runner (#24108)

2026-05-28 15:26:55 -07:00

audit.rs

Record Windows world-writable scan telemetry (#40983)

2026-08-26 21:52:56 +00:00

cap.rs

[codex] Scope Windows sandbox write-root capability SIDs (#21479)

2026-05-13 18:28:52 +00:00

deny_read_acl.rs

feat(sandbox): add Windows deny-read parity (#18202)

2026-05-11 23:04:28 -07:00

deny_read_resolver_access_tests.rs

Align deny-read matching with executor path semantics (#41209)

2026-08-27 21:15:37 +00:00

deny_read_resolver.rs

Align deny-read matching with executor path semantics (#41209)

2026-08-27 21:15:37 +00:00

deny_read_state.rs

feat(sandbox): add Windows deny-read parity (#18202)

2026-05-11 23:04:28 -07:00

deny_read_walker_tests.rs

Improve sandboxing, MCP errors, and cached approvals (#41196)

2026-08-27 20:05:08 +00:00

deny_read_walker.rs

Improve sandboxing, MCP errors, and cached approvals (#41196)

2026-08-27 20:05:08 +00:00

desktop_tests.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

desktop.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

dpapi.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

elevated_impl.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

env.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

helper_materialization.rs

Resolve bundled Windows helpers through bin junctions (#39649)

2026-08-20 07:42:18 +00:00

hide_users.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

identity.rs

Separate Windows sandbox provisioning from ACL refresh (#42309)

2026-09-02 16:49:45 +00:00

lib.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

logging.rs

Attach Windows sandbox log to feedback reports (#24623)

2026-05-26 15:59:25 -07:00

path_normalization.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

proc_thread_attr.rs

Terminate Windows process trees with job objects (#34624)

2026-07-21 22:07:09 +00:00

process.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

resolved_permissions.rs

Preserve Windows root reads with deny-read rules (#40441)

2026-08-24 17:29:21 +00:00

sandbox_utils.rs

Allow nested Git repositories in the Windows sandbox (#38080)

2026-08-11 22:22:18 +00:00

setup_error.rs

Improve Windows sandbox setup refresh diagnostics (#26471)

2026-06-04 16:52:10 -07:00

setup.rs

Separate Windows sandbox provisioning from ACL refresh (#42309)

2026-09-02 16:49:45 +00:00

spawn_prep.rs

fix(windows-sandbox): allow deletion in writable roots (#31138)

2026-07-08 15:05:57 -03:00

ssh_config_dependencies.rs

Filter Windows sandbox roots from SSH config dependencies (#18493)

2026-04-19 14:58:33 -07:00

stdio_bridge_tests.rs

Extract shared Windows sandbox session runner (#28357)

2026-06-15 18:30:48 +00:00

stdio_bridge.rs

Extract shared Windows sandbox session runner (#28357)

2026-06-15 18:30:48 +00:00

token_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

token.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

wfp_setup.rs

Prepare the telemetry shutdown worker during initialization (#39050)

2026-08-17 19:06:53 +00:00

wfp.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

winutil.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

workspace_acl.rs

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00

wrapper_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

wrapper.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00