core-agent-ide/codex-rs/cli
iceweasel-oai e032d338f2
move cap_sid file into ~/.codex so the sandbox cannot overwrite it (#6798)
The `cap_sid` file contains the IDs of the two custom SIDs that the
Windows sandbox creates/manages to implement read-only and
workspace-write sandbox policies.

It previously lived in `<cwd>/.codex` which means that the sandbox could
write to it, which could degrade the efficacy of the sandbox. This
change moves it to `~/.codex/` (or wherever `CODEX_HOME` points to) so
that it is outside the workspace.
2025-11-17 15:49:41 -08:00
..
src move cap_sid file into ~/.codex so the sandbox cannot overwrite it (#6798) 2025-11-17 15:49:41 -08:00
tests chore: unify config crates (#5958) 2025-10-30 10:28:32 +00:00
Cargo.toml add codex debug seatbelt --log-denials (#4098) 2025-11-10 22:48:14 +00:00