core-agent-ide/codex-rs/windows-sandbox-rs
iceweasel-oai 0e4adcd760
use machine scope instead of user scope for dpapi. (#9713)
This fixes a bug where the elevated sandbox setup encrypts sandbox user
passwords as an admin user, but normal command execution attempts to
decrypt them as a different user.

Machine scope allows all users to encyrpt/decrypt

this PR also moves the encrypted file to a different location
.codex/.sandbox-secrets which the sandbox users cannot read.
2026-01-22 16:40:13 -08:00
..
src use machine scope instead of user scope for dpapi. (#9713) 2026-01-22 16:40:13 -08:00
BUILD.bazel feat: add support for building with Bazel (#8875) 2026-01-09 11:09:43 -08:00
build.rs Elevated Sandbox 2 (#7792) 2025-12-10 21:23:16 -08:00
Cargo.lock Windows Sandbox - Alpha version (#4905) 2025-10-30 15:51:57 -07:00
Cargo.toml fix: restrict windows-sys to Windows target (#8522) 2025-12-24 17:12:04 -07:00
codex-windows-sandbox-setup.manifest Elevated Sandbox 2 (#7792) 2025-12-10 21:23:16 -08:00
sandbox_smoketests.py smoketest for browser vuln, rough draft of Windows security doc (#6822) 2025-11-18 16:43:34 -08:00