fix(sandbox): keep Windows restricted-token SIDs narrow (no Users broaden) - #640

Open

euxaristia wants to merge 26 commits into

Gitlawb:mainfrom

euxaristia:fix/windows-sandbox-restricted-token-sids

Commits on Jul 31, 2026

fix(windows): add Users and Authenticated Users SIDs to restricted token SIDs
euxaristia
committed
fix(sandbox): add DenyWrite ACEs for system drive, ProgramData, and Windows Temp
euxaristia
committed
fix(sandbox): scope broadened restricted-token SIDs to the elevated tier
euxaristia
committed
fix(sandbox): fail loudly on unexpected ProgramData marker stat errors
euxaristia
committed
fix(windows): resolve deny-paths from trusted APIs and stop ACL inheritance propagation
euxaristia
committed
fix(sandbox): scope SID broadening to fully restricted tokens, stable deny identity
euxaristia
committed
fix(sandbox): include NoInherit in the ACL entry dedupe key
euxaristia
committed
fix(sandbox): deny existing writable descendants of shared deny roots
euxaristia
committed
fix(sandbox): correct object-ACE parsing, scan files, and skip write-root-nested shared paths

euxaristia
and
claude
committed
fix(sandbox): gate broadened SIDs on volume coverage; honor INHERIT_ONLY ACEs

euxaristia
and
claude
committed
fix(sandbox): close Windows ACL and volume-enumeration gaps from review
euxaristia
committed
fix(sandbox): fail-closed descendant coverage before broadening SIDs
euxaristia
committed
fix(sandbox): address review findings on descendant scan and Public-dir probe
euxaristia
committed
fix(sandbox): tighten Windows SID broadening review gaps
euxaristia
committed
fix(sandbox): make Windows shared-root coverage scan viable
euxaristia
committed
style(sandbox): gofmt windows_acl_descendants_windows.go
euxaristia
committed
fix(sandbox): address review findings on descendant scan, root DACL deduplication, and complete write deny
euxaristia
committed
fix(sandbox): handle junctions in ACL walk, require full deny coverage, and make root denies idempotent
euxaristia
committed
fix(sandbox): align write probe mask with ACL deny write mask and handle unlistable system dirs
euxaristia
committed
fix(windows): exclude SYNCHRONIZE from DenyWrite ACE and disable SID broadening on network commands
euxaristia
committed
fix(sandbox): address review findings on reparse junctions and unmounted volume gate
euxaristia
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(sandbox): keep Windows restricted-token SIDs narrow (no Users broaden) - #640

fix(sandbox): keep Windows restricted-token SIDs narrow (no Users broaden)#640
euxaristia wants to merge 26 commits into
Gitlawb:mainfrom
euxaristia:fix/windows-sandbox-restricted-token-sids

Commits on Jul 31, 2026

fix(windows): add Users and Authenticated Users SIDs to restricted token SIDs

fix(sandbox): add DenyWrite ACEs for system drive, ProgramData, and Windows Temp

fix(sandbox): scope broadened restricted-token SIDs to the elevated tier

fix(sandbox): fail loudly on unexpected ProgramData marker stat errors

fix(windows): resolve deny-paths from trusted APIs and stop ACL inheritance propagation

fix(sandbox): scope SID broadening to fully restricted tokens, stable deny identity

fix(sandbox): include NoInherit in the ACL entry dedupe key

fix(sandbox): deny existing writable descendants of shared deny roots

fix(sandbox): correct object-ACE parsing, scan files, and skip write-root-nested shared paths

fix(sandbox): gate broadened SIDs on volume coverage; honor INHERIT_ONLY ACEs

fix(sandbox): close Windows ACL and volume-enumeration gaps from review

fix(sandbox): fail-closed descendant coverage before broadening SIDs

fix(sandbox): address review findings on descendant scan and Public-dir probe

fix(sandbox): tighten Windows SID broadening review gaps

fix(sandbox): make Windows shared-root coverage scan viable

style(sandbox): gofmt windows_acl_descendants_windows.go

fix(sandbox): address review findings on descendant scan, root DACL deduplication, and complete write deny

fix(sandbox): handle junctions in ACL walk, require full deny coverage, and make root denies idempotent

fix(sandbox): align write probe mask with ACL deny write mask and handle unlistable system dirs

fix(windows): exclude SYNCHRONIZE from DenyWrite ACE and disable SID broadening on network commands

fix(sandbox): address review findings on reparse junctions and unmounted volume gate

Commits on Aug 1, 2026

fix(sandbox): disable Windows restricted-token SID broadening

fix(sandbox): address restricted-token SID review findings

fix(sandbox): preserve DenyRead when revoking experimental write denies

fix(sandbox): reject DenyRead with elevated restricted-token sandbox

fix(sandbox): reject DenyRead on both Windows restricted-token tiers