28c0089060
## Summary Adds support for a Unix socket escape hatch so we can bypass socket allowlisting when explicitly enabled. ## Description * added a new flag, `network.dangerously_allow_all_unix_sockets` as an explicit escape hatch * In codex-network-proxy, enabling that flag now allows any absolute Unix socket path from x-unix-socket instead of requiring each path to be explicitly allowlisted. Relative paths are still rejected. * updated the macOS seatbelt path in core so it enforces the same Unix socket behavior: * allowlisted sockets generate explicit network* subpath rules * allow-all generates a broad network* (subpath "/") rule --------- Co-authored-by: Codex <199175422+chatgpt-codex-connector[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| admin.rs | ||
| config.rs | ||
| http_proxy.rs | ||
| lib.rs | ||
| network_policy.rs | ||
| policy.rs | ||
| proxy.rs | ||
| reasons.rs | ||
| responses.rs | ||
| runtime.rs | ||
| socks5.rs | ||
| state.rs | ||
| upstream.rs | ||