Huanqi Cao
441927c526
fix(sandbox): drop Authenticated Users from both restricting lists — close the C:\\-root escape, CIM unavailable in every confined mode
...
workspace-write now runs [logon SID, Everyone, orphan]: the two lists differ only by the orphan, and the keep-alive group (logon SID + Everyone) is the single shared invariant. The WMI namespace security check fails in BOTH modes (0x80041003), so CIM/Get-ComputerInfo are unavailable everywhere — the price of closing the C:\\-root tree-creation escape (AU:(AD) + AU:(OI)(CI)(IO)(M)) in workspace-write too. The unused WinLocalSid/WinInteractiveSid/WinAuthenticatedUserSid constants and their ABI-probe prints are removed; the enforcement 'full' claim now stands on a closed NTFS surface. New regression: a C:\\Users\\Public subdirectory write is denied under BOTH modes (the ambient-writable blind spot the review flagged — INTERACTIVE is absent from both lists). FAT-class (non-ACL) targets outside the granted roots remain writable (no security descriptors to intersect) — documented as a legacy residue, warn-only, not engineered around. Docs/design note/PR body updated in both languages (list I/J terminology gone everywhere).
2026-08-08 21:55:02 +08:00
..
2026-08-04 18:42:13 +08:00
2026-07-24 23:43:10 +08:00
2026-08-04 18:42:13 +08:00
2026-08-05 14:02:47 +08:00
2026-08-05 14:02:47 +08:00
2026-08-05 14:02:47 +08:00
2026-08-04 17:36:14 +08:00
2026-07-23 19:33:30 +08:00
2026-08-04 17:36:14 +08:00
2026-08-08 15:28:35 +08:00
2026-08-08 15:28:35 +08:00
2026-08-08 15:28:35 +08:00
2026-08-05 07:32:27 +08:00
2026-08-05 07:32:27 +08:00
2026-08-05 07:32:27 +08:00
2026-08-06 21:38:47 +08:00
2026-08-04 22:18:35 +08:00
2026-08-06 21:38:47 +08:00
2026-08-08 15:29:36 +08:00
2026-08-08 15:29:36 +08:00
2026-08-08 15:29:36 +08:00
2026-08-06 11:42:31 +08:00
2026-07-29 20:43:31 +08:00
2026-08-06 11:25:28 +08:00
2026-08-05 13:09:53 +08:00
2026-08-04 13:49:35 +08:00
2026-08-05 13:09:53 +08:00
2026-08-05 13:09:53 +08:00
2026-07-31 19:21:16 +08:00
2026-08-05 13:09:53 +08:00
2026-08-06 13:44:23 +08:00
2026-08-06 13:44:23 +08:00
2026-08-06 13:44:23 +08:00
2026-08-04 17:36:14 +08:00
2026-07-30 21:28:13 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-24 23:43:10 +08:00
2026-08-04 17:36:14 +08:00
2026-08-06 18:54:53 +08:00
2026-08-06 18:54:53 +08:00
2026-08-06 18:54:53 +08:00
2026-08-04 17:36:14 +08:00
2026-07-31 13:49:41 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 23:07:14 +08:00
2026-08-04 17:36:14 +08:00
2026-08-06 14:41:17 +08:00
2026-08-06 14:41:17 +08:00
2026-08-06 14:41:17 +08:00
2026-08-04 20:54:42 +08:00
2026-07-28 10:26:15 -07:00
2026-08-04 20:54:42 +08:00
2026-08-02 12:51:09 +08:00
2026-08-02 12:51:09 +08:00
2026-08-02 12:51:09 +08:00
2026-08-04 17:36:14 +08:00
2026-07-29 21:15:42 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 20:54:42 +08:00
2026-07-27 04:14:51 +08:00
2026-08-04 20:54:42 +08:00
2026-08-04 17:36:14 +08:00
2026-07-29 22:10:26 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-26 23:06:00 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 23:07:14 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-26 02:33:29 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 21:37:30 +08:00
2026-08-04 17:36:14 +08:00
2026-08-05 13:09:53 +08:00
2026-07-31 19:21:16 +08:00
2026-08-05 13:09:53 +08:00
2026-08-05 13:09:53 +08:00
2026-08-04 13:49:35 +08:00
2026-08-05 13:09:53 +08:00
2026-08-04 17:36:14 +08:00
2026-07-28 10:26:15 -07:00
2026-08-04 17:36:14 +08:00
2026-08-05 10:57:53 +08:00
2026-07-24 01:40:25 +08:00
2026-08-05 10:57:53 +08:00
2026-08-05 13:09:53 +08:00
2026-07-31 22:52:18 +08:00
2026-08-05 13:09:53 +08:00
2026-08-05 13:09:53 +08:00
2026-08-03 10:56:09 +08:00
2026-08-05 13:09:53 +08:00
2026-08-05 13:09:53 +08:00
2026-07-31 22:52:18 +08:00
2026-08-05 13:09:53 +08:00
2026-08-05 13:09:53 +08:00
2026-07-30 13:49:57 +08:00
2026-08-05 13:09:53 +08:00
2026-08-05 13:09:53 +08:00
2026-08-04 14:09:52 +08:00
2026-08-05 13:09:53 +08:00
2026-08-04 18:42:13 +08:00
2026-07-27 21:20:06 +08:00
2026-08-04 18:42:13 +08:00
2026-08-07 23:45:28 +08:00
2026-08-07 23:45:28 +08:00
2026-08-07 23:45:28 +08:00
2026-08-02 12:51:09 +08:00
2026-08-02 12:51:09 +08:00
2026-08-02 12:51:09 +08:00
2026-08-05 13:09:53 +08:00
2026-08-03 16:04:26 +08:00
2026-08-05 13:09:53 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 14:29:52 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 14:29:52 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 14:29:52 +08:00
2026-08-04 17:36:14 +08:00
2026-08-08 15:43:52 +08:00
2026-08-08 15:43:52 +08:00
2026-08-08 15:43:52 +08:00
2026-08-07 00:05:43 +08:00
2026-08-07 00:05:43 +08:00
2026-08-07 00:05:43 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 20:35:38 +08:00
2026-08-04 17:36:14 +08:00
2026-08-06 18:08:45 +08:00
2026-08-06 14:57:30 +08:00
2026-08-06 18:08:45 +08:00
2026-08-06 14:37:56 +08:00
2026-08-06 14:37:56 +08:00
2026-08-06 14:37:56 +08:00
2026-08-04 21:04:43 +08:00
2026-08-04 21:04:43 +08:00
2026-08-04 21:04:43 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-02 03:56:25 +08:00
2026-08-02 03:56:25 +08:00
2026-08-02 03:56:25 +08:00
2026-08-04 17:36:14 +08:00
2026-07-26 01:16:41 +08:00
2026-08-04 17:36:14 +08:00
2026-08-05 12:50:58 +08:00
2026-07-31 15:11:11 +08:00
2026-08-05 12:50:58 +08:00
2026-07-31 18:37:34 +08:00
2026-07-31 18:37:34 +08:00
2026-07-31 18:37:34 +08:00
2026-08-04 20:54:42 +08:00
2026-07-29 00:39:56 +08:00
2026-08-04 20:54:42 +08:00
2026-07-31 18:37:34 +08:00
2026-07-31 18:37:34 +08:00
2026-07-31 18:37:34 +08:00
2026-08-04 17:36:14 +08:00
2026-07-26 22:53:47 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-26 02:43:34 +08:00
2026-08-04 17:36:14 +08:00
2026-08-08 17:59:50 +08:00
2026-08-08 17:59:50 +08:00
2026-08-08 17:59:50 +08:00
2026-08-08 17:59:50 +08:00
2026-08-08 17:59:50 +08:00
2026-08-08 17:59:50 +08:00
2026-08-08 01:10:57 +08:00
2026-08-08 01:10:57 +08:00
2026-08-08 01:10:57 +08:00
2026-08-05 00:31:43 +08:00
2026-08-05 00:31:43 +08:00
2026-08-05 00:31:43 +08:00
2026-07-31 19:21:16 +08:00
2026-07-31 19:21:16 +08:00
2026-07-31 19:21:16 +08:00
2026-08-05 13:09:53 +08:00
2026-07-31 22:16:40 +08:00
2026-08-05 13:09:53 +08:00
2026-08-05 15:18:38 +08:00
2026-08-05 15:18:38 +08:00
2026-08-05 15:18:38 +08:00
2026-08-04 18:42:13 +08:00
2026-07-28 01:41:32 +08:00
2026-08-04 18:42:13 +08:00
2026-08-02 16:25:02 +08:00
2026-08-02 16:25:02 +08:00
2026-08-02 16:25:02 +08:00
2026-08-03 18:06:14 +08:00
2026-08-03 16:04:26 +08:00
2026-08-03 16:04:26 +08:00
2026-08-08 15:56:36 +08:00
2026-08-08 15:56:36 +08:00
2026-08-08 15:56:36 +08:00
2026-08-04 17:36:14 +08:00
2026-07-31 18:37:34 +08:00
2026-08-04 17:36:14 +08:00
2026-08-02 12:51:10 +08:00
2026-08-02 12:51:10 +08:00
2026-08-02 12:51:10 +08:00
2026-07-31 16:49:55 +08:00
2026-07-31 16:49:55 +08:00
2026-07-31 16:49:55 +08:00
2026-08-08 15:43:52 +08:00
2026-08-08 15:43:52 +08:00
2026-08-08 15:43:52 +08:00
2026-08-04 17:36:14 +08:00
2026-07-30 21:04:00 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 13:20:28 +08:00
2026-08-04 13:20:28 +08:00
2026-08-04 13:20:28 +08:00
2026-08-04 17:36:14 +08:00
2026-07-28 19:43:56 +08:00
2026-08-04 17:36:14 +08:00
2026-08-07 16:49:20 +08:00
2026-08-07 16:49:20 +08:00
2026-08-07 16:49:20 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-04 20:54:42 +08:00
2026-07-29 21:09:02 +08:00
2026-08-04 20:54:42 +08:00
2026-08-06 19:52:16 +08:00
2026-08-06 19:52:16 +08:00
2026-08-06 19:52:16 +08:00
2026-08-02 01:29:04 +08:00
2026-08-02 01:29:04 +08:00
2026-08-02 01:29:04 +08:00
2026-08-02 20:09:05 +08:00
2026-08-02 20:09:05 +08:00
2026-08-02 20:09:05 +08:00
2026-07-31 13:49:41 +08:00
2026-07-31 13:49:41 +08:00
2026-07-31 13:49:41 +08:00
2026-08-07 22:04:04 +08:00
2026-08-07 22:04:04 +08:00
2026-08-07 22:04:04 +08:00
2026-08-04 17:36:14 +08:00
2026-07-30 19:38:18 +08:00
2026-08-04 17:36:14 +08:00
2026-08-08 01:10:57 +08:00
2026-08-08 01:10:57 +08:00
2026-08-08 01:10:57 +08:00
2026-08-04 15:25:30 +08:00
2026-08-04 15:25:30 +08:00
2026-08-04 15:25:30 +08:00
2026-08-03 18:35:26 +08:00
2026-08-03 18:35:26 +08:00
2026-08-03 18:35:26 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-03 18:06:14 +08:00
2026-08-03 16:04:26 +08:00
2026-08-03 16:04:26 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-04 15:25:30 +08:00
2026-08-04 15:25:30 +08:00
2026-08-04 15:25:30 +08:00
2026-07-30 20:26:33 +08:00
2026-07-30 20:26:33 +08:00
2026-07-30 20:26:33 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-04 15:25:30 +08:00
2026-08-04 15:25:30 +08:00
2026-08-04 15:25:30 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-07-31 15:49:59 +08:00
2026-07-31 15:49:59 +08:00
2026-07-31 15:49:59 +08:00
2026-08-06 01:38:26 +08:00
2026-08-06 01:38:26 +08:00
2026-08-06 01:38:26 +08:00
2026-08-06 06:29:06 +08:00
2026-08-06 06:29:06 +08:00
2026-08-06 06:29:06 +08:00
2026-07-31 13:24:30 +08:00
2026-07-31 13:24:30 +08:00
2026-07-31 13:24:30 +08:00
2026-07-31 20:39:53 +08:00
2026-07-31 20:39:53 +08:00
2026-07-31 20:39:53 +08:00
2026-07-31 14:08:13 +08:00
2026-07-31 14:08:13 +08:00
2026-07-31 14:08:13 +08:00
2026-07-31 14:28:03 +08:00
2026-07-31 14:28:03 +08:00
2026-07-31 14:28:03 +08:00
2026-08-04 17:36:14 +08:00
2026-07-31 02:34:52 -07:00
2026-08-04 17:36:14 +08:00
2026-08-01 06:15:16 -07:00
2026-08-01 06:15:16 -07:00
2026-08-01 06:15:16 -07:00
2026-08-04 15:18:48 +08:00
2026-08-04 15:18:48 +08:00
2026-08-04 15:18:48 +08:00
2026-08-07 16:49:20 +08:00
2026-08-07 16:49:20 +08:00
2026-08-07 16:49:20 +08:00
2026-08-06 06:29:06 +08:00
2026-08-06 06:29:06 +08:00
2026-08-06 06:29:06 +08:00
2026-08-08 20:11:21 +08:00
2026-08-08 20:11:21 +08:00
2026-08-08 20:11:21 +08:00
2026-08-07 20:50:36 +08:00
2026-08-07 20:50:36 +08:00
2026-08-07 20:50:36 +08:00
2026-08-08 20:11:21 +08:00
2026-08-08 20:11:21 +08:00
2026-08-08 20:11:21 +08:00
2026-08-06 06:29:06 +08:00
2026-08-06 06:29:06 +08:00
2026-08-06 06:29:06 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-06 14:41:17 +08:00
2026-08-06 14:41:17 +08:00
2026-08-06 14:41:17 +08:00
2026-08-03 20:08:41 +08:00
2026-08-03 20:08:41 +08:00
2026-08-03 20:08:41 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-04 15:55:07 +08:00
2026-08-04 15:55:07 +08:00
2026-08-04 15:55:07 +08:00
2026-08-06 21:38:47 +08:00
2026-08-05 07:09:16 +08:00
2026-08-06 21:38:47 +08:00
2026-08-04 15:42:39 +08:00
2026-08-04 15:42:39 +08:00
2026-08-04 15:42:39 +08:00
2026-08-04 14:14:12 +08:00
2026-08-04 14:14:12 +08:00
2026-08-04 14:14:12 +08:00
2026-08-07 22:52:19 +08:00
2026-08-07 22:52:19 +08:00
2026-08-07 22:52:19 +08:00
2026-08-06 00:21:34 +08:00
2026-08-06 00:21:34 +08:00
2026-08-06 00:21:34 +08:00
2026-08-04 21:02:03 +08:00
2026-08-04 21:02:03 +08:00
2026-08-04 21:02:03 +08:00
2026-08-05 17:00:48 +08:00
2026-08-05 17:00:48 +08:00
2026-08-05 17:00:48 +08:00
2026-08-06 11:49:03 +08:00
2026-08-06 11:49:03 +08:00
2026-08-06 11:49:03 +08:00
2026-08-06 16:27:27 +08:00
2026-08-06 16:27:27 +08:00
2026-08-06 16:27:27 +08:00
2026-08-08 18:10:21 +08:00
2026-08-08 18:10:21 +08:00
2026-08-08 18:10:21 +08:00
2026-08-05 23:26:39 -07:00
2026-08-05 23:26:39 -07:00
2026-08-05 23:26:39 -07:00
2026-08-06 18:54:53 +08:00
2026-08-06 18:54:53 +08:00
2026-08-06 18:54:53 +08:00
2026-08-06 23:00:01 +08:00
2026-08-06 23:00:01 +08:00
2026-08-06 23:00:01 +08:00
2026-08-06 11:12:48 +08:00
2026-08-06 11:12:48 +08:00
2026-08-06 11:12:48 +08:00
2026-08-06 23:00:01 +08:00
2026-08-06 23:00:01 +08:00
2026-08-06 23:00:01 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-07 16:45:50 +08:00
2026-08-07 16:45:50 +08:00
2026-08-07 16:45:50 +08:00
2026-08-07 05:06:21 -07:00
2026-08-07 05:06:21 -07:00
2026-08-07 05:06:21 -07:00
2026-08-08 15:05:50 +08:00
2026-08-08 15:05:50 +08:00
2026-08-08 15:05:50 +08:00
2026-08-08 10:46:58 +08:00
2026-08-08 10:46:58 +08:00
2026-08-08 10:46:58 +08:00
2026-08-08 13:15:52 +08:00
2026-08-08 13:15:52 +08:00
2026-08-08 13:15:52 +08:00
2026-08-08 21:55:02 +08:00
2026-08-08 21:55:02 +08:00
2026-08-08 21:55:02 +08:00