viyatb-oai e25bedc166 Block non-loopback inbound traffic for the Windows offline sandbox (#44639) ...

## Why

The offline sandbox's non-loopback firewall block covered only outbound traffic. Add a matching inbound block for the offline sandbox user.

## What changed

- Configure an inbound firewall rule scoped to the offline user's SID, blocking all protocols and ports for non-loopback remote addresses.
- Make firewall rule direction explicit while preserving the existing outbound rules.
- Remove the new inbound rule during uninstall.

## Testing

Extend the elevated Windows sandbox integration test to inspect effective inbound and outbound rules, asserting their uniqueness, direction, block action, enabled state, profiles, address and port filters, protocol, and user scope.

GitOrigin-RevId: cbc1ca0d8d08a31fc53da5ad5be6ee5d51afa63d

2026-09-10 21:02:14 +00:00

..

common

Remove the unused legacy remote compaction implementation (#44273)

2026-09-09 18:40:53 +00:00

remote_env_windows

Apply remote platform semantics to exec safety checks (#42113)

2026-09-01 18:24:56 +00:00

suite

Block non-loopback inbound traffic for the Windows offline sandbox (#44639)

2026-09-10 21:02:14 +00:00

all.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

responses_headers.rs

Expose session analytics state in Responses turn metadata (#44628)

2026-09-10 19:41:14 +00:00