mirrors/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-04-28 02:11:08 +03:00
Code Issues Packages Projects Releases Wiki Activity

More

Browse Source
This commit is contained in:
jimmyfraiture
2025-09-22 13:54:50 +01:00
parent aa8b4bed98
commit def129c482
2 changed files with 12 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
codex-rs/core/src/shell.rs
View File

@@ -561,11 +561,17 @@ mod tests_windows {
];
for (shell, input, expected_cmd) in cases {
let actual_cmd = shell
.format_default_shell_invocation(input.iter().map(std::string::ToString::to_string).collect());
let actual_cmd = shell.format_default_shell_invocation(
input.iter().map(std::string::ToString::to_string).collect(),
);
assert_eq!(
actual_cmd,
Some(expected_cmd.iter().map(std::string::ToString::to_string).collect())
Some(
expected_cmd
.iter()
.map(std::string::ToString::to_string)
.collect()
)
);
}
}

6
codex-rs/linux-sandbox/src/landlock.rs
View File

@@ -36,12 +36,12 @@ pub(crate) fn apply_sandbox_policy_to_current_thread(
}
if !sandbox_policy.has_full_disk_write_access() {
let writable_roots = sandbox_policy
let writable_roots: Vec<PathBuf> = sandbox_policy
.get_writable_roots_with_cwd(cwd)
.into_iter()
.map(|writable_root| writable_root.root)
.collect();
install_filesystem_landlock_rules_on_current_thread(writable_roots)?;
install_filesystem_landlock_rules_on_current_thread(&writable_roots)?;
}
// TODO(ragona): Add appropriate restrictions if
@@ -70,7 +70,7 @@ fn install_filesystem_landlock_rules_on_current_thread(writable_roots: &[PathBuf
.set_no_new_privs(true);
if !writable_roots.is_empty() {
ruleset = ruleset.add_rules(landlock::path_beneath_rules(&writable_roots, access_rw))?;
ruleset = ruleset.add_rules(landlock::path_beneath_rules(writable_roots, access_rw))?;
}
let status = ruleset.restrict_self()?;