mirror of
https://github.com/esengine/DeepSeek-Reasonix.git
synced 2026-11-07 02:36:01 -10:00
esengine
59fc0b6520
The restricted token now drops every privilege but the traverse check, so backup semantics cannot write outside the roots even from an elevated session. A SID is synthetic only if no account resolves it. The launcher refuses to run under a restricted token (a command's own launcher inherits it), grants only session temp folders, hands the child just the standard handles, runs it in a job with UI limits, and the default DACL and the grant mask are narrower. Links are not followed at grant time and a link root is refused. REASONIX.md, the guide, the Settings text and the release note list what is and is not bounded.
404 B
404 B
- 新增：Windows 命令沙箱（设置 > 沙箱，默认关）：不能在授权文件夹外创建或改写文件；删除、重命名、读取、联网、ssh-agent/docker 管道不受限。见 #13109。
- Added: a Windows command sandbox (Settings > Sandbox, off): no creating or overwriting files outside granted folders; delete, rename, read, network, ssh-agent/docker pipes are not bounded. #13109