Huanqi Cao
01a3b454f6
fix(sandbox): extend the restricted token's default DACL with a write-SID ACE
...
New objects created without an explicit security descriptor take
their DACL from the token's default DACL, which CreateRestrictedToken
builds from the user's ambient SIDs — none of them a restricting SID.
Confined children therefore failed the write pass-2 check when
creating anonymous pipes (CreatePipe: ERROR_ACCESS_DENIED, surfaced
as Node EPERM), breaking PowerShell pipelines and other CreatePipe
consumers. Merge a full-access write-SID ACE (Everyone under
read-only) into the token default DACL at init via
SetTokenInformation(TokenDefaultDacl).
Named pipes are EXEMPT: their default security descriptor is the
kernel's PUBLIC template (owner/SYSTEM/Admins full, Everyone
read-only), which no token change influences, so libuv's piped stdio
capture stays denied for confined grandchildren — the POC-documented
boundary, now pinned by the runner suite (inherit/ignore OK, pipe
DENIED) and documented in the README pair. The NUL paragraph is
corrected to the measured matrix (Everyone has 0x1201BF on the
device: cmd/node writes land; Set-Content fails at the PS layer).
2026-08-09 12:34:48 +08:00
..
2026-08-04 18:42:13 +08:00
2026-07-24 23:43:10 +08:00
2026-08-04 18:42:13 +08:00
2026-08-08 21:27:59 +08:00
2026-08-08 21:27:59 +08:00
2026-08-08 21:27:59 +08:00
2026-08-04 17:36:14 +08:00
2026-07-23 19:33:30 +08:00
2026-08-04 17:36:14 +08:00
2026-08-08 15:28:35 +08:00
2026-08-08 15:28:35 +08:00
2026-08-08 15:28:35 +08:00
2026-08-05 07:32:27 +08:00
2026-08-05 07:32:27 +08:00
2026-08-05 07:32:27 +08:00
2026-08-06 21:38:47 +08:00
2026-08-04 22:18:35 +08:00
2026-08-06 21:38:47 +08:00
2026-08-08 15:29:36 +08:00
2026-08-08 15:29:36 +08:00
2026-08-08 15:29:36 +08:00
2026-08-06 11:42:31 +08:00
2026-07-29 20:43:31 +08:00
2026-08-06 11:25:28 +08:00
2026-08-05 13:09:53 +08:00
2026-08-04 13:49:35 +08:00
2026-08-05 13:09:53 +08:00
2026-08-05 13:09:53 +08:00
2026-07-31 19:21:16 +08:00
2026-08-05 13:09:53 +08:00
2026-08-09 01:27:09 +08:00
2026-08-09 01:27:09 +08:00
2026-08-09 01:27:09 +08:00
2026-08-04 17:36:14 +08:00
2026-07-30 21:28:13 +08:00
2026-08-04 17:36:14 +08:00
2026-08-09 01:27:09 +08:00
2026-08-09 01:27:09 +08:00
2026-08-09 01:27:09 +08:00
2026-08-09 01:31:57 +08:00
2026-08-09 01:31:57 +08:00
2026-08-09 01:31:57 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 23:07:14 +08:00
2026-08-04 17:36:14 +08:00
2026-08-09 01:27:09 +08:00
2026-08-09 01:27:09 +08:00
2026-08-09 01:27:09 +08:00
2026-08-04 20:54:42 +08:00
2026-07-28 10:26:15 -07:00
2026-08-04 20:54:42 +08:00
2026-08-02 12:51:09 +08:00
2026-08-02 12:51:09 +08:00
2026-08-02 12:51:09 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-04 20:54:42 +08:00
2026-07-27 04:14:51 +08:00
2026-08-04 20:54:42 +08:00
2026-08-09 01:27:09 +08:00
2026-08-09 01:27:09 +08:00
2026-08-09 01:27:09 +08:00
2026-08-04 17:36:14 +08:00
2026-07-26 23:06:00 +08:00
2026-08-04 17:36:14 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-04 17:36:14 +08:00
2026-07-26 02:33:29 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 21:37:30 +08:00
2026-08-04 17:36:14 +08:00
2026-08-05 13:09:53 +08:00
2026-07-31 19:21:16 +08:00
2026-08-05 13:09:53 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:32:39 +08:00
2026-08-09 01:32:39 +08:00
2026-08-09 01:32:39 +08:00
2026-08-05 10:57:53 +08:00
2026-07-24 01:40:25 +08:00
2026-08-05 10:57:53 +08:00
2026-08-05 13:09:53 +08:00
2026-07-31 22:52:18 +08:00
2026-08-05 13:09:53 +08:00
2026-08-05 13:09:53 +08:00
2026-08-03 10:56:09 +08:00
2026-08-05 13:09:53 +08:00
2026-08-05 13:09:53 +08:00
2026-07-31 22:52:18 +08:00
2026-08-05 13:09:53 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-05 13:09:53 +08:00
2026-08-04 14:09:52 +08:00
2026-08-05 13:09:53 +08:00
2026-08-04 18:42:13 +08:00
2026-07-27 21:20:06 +08:00
2026-08-04 18:42:13 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-05 13:09:53 +08:00
2026-08-03 16:04:26 +08:00
2026-08-05 13:09:53 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 14:29:52 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 14:29:52 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 14:29:52 +08:00
2026-08-04 17:36:14 +08:00
2026-08-09 01:21:11 +08:00
2026-08-09 01:21:11 +08:00
2026-08-09 01:21:11 +08:00
2026-08-08 21:05:58 +08:00
2026-08-08 21:05:58 +08:00
2026-08-08 21:05:58 +08:00
2026-08-04 17:36:14 +08:00
2026-07-22 20:35:38 +08:00
2026-08-04 17:36:14 +08:00
2026-08-09 01:21:11 +08:00
2026-08-09 01:21:11 +08:00
2026-08-09 01:21:11 +08:00
2026-08-06 14:37:56 +08:00
2026-08-06 14:37:56 +08:00
2026-08-06 14:37:56 +08:00
2026-08-04 21:04:43 +08:00
2026-08-04 21:04:43 +08:00
2026-08-04 21:04:43 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-02 03:56:25 +08:00
2026-08-02 03:56:25 +08:00
2026-08-02 03:56:25 +08:00
2026-08-04 17:36:14 +08:00
2026-07-26 01:16:41 +08:00
2026-08-04 17:36:14 +08:00
2026-08-05 12:50:58 +08:00
2026-07-31 15:11:11 +08:00
2026-08-05 12:50:58 +08:00
2026-07-31 18:37:34 +08:00
2026-07-31 18:37:34 +08:00
2026-07-31 18:37:34 +08:00
2026-08-04 20:54:42 +08:00
2026-07-29 00:39:56 +08:00
2026-08-04 20:54:42 +08:00
2026-07-31 18:37:34 +08:00
2026-07-31 18:37:34 +08:00
2026-07-31 18:37:34 +08:00
2026-08-04 17:36:14 +08:00
2026-07-26 22:53:47 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 17:36:14 +08:00
2026-07-26 02:43:34 +08:00
2026-08-04 17:36:14 +08:00
2026-08-08 17:59:50 +08:00
2026-08-08 17:59:50 +08:00
2026-08-08 17:59:50 +08:00
2026-08-08 17:59:50 +08:00
2026-08-08 17:59:50 +08:00
2026-08-08 17:59:50 +08:00
2026-08-08 01:10:57 +08:00
2026-08-08 01:10:57 +08:00
2026-08-08 01:10:57 +08:00
2026-08-05 00:31:43 +08:00
2026-08-05 00:31:43 +08:00
2026-08-05 00:31:43 +08:00
2026-07-31 19:21:16 +08:00
2026-07-31 19:21:16 +08:00
2026-07-31 19:21:16 +08:00
2026-08-05 13:09:53 +08:00
2026-07-31 22:16:40 +08:00
2026-08-05 13:09:53 +08:00
2026-08-05 15:18:38 +08:00
2026-08-05 15:18:38 +08:00
2026-08-05 15:18:38 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-02 16:25:02 +08:00
2026-08-02 16:25:02 +08:00
2026-08-02 16:25:02 +08:00
2026-08-03 18:06:14 +08:00
2026-08-03 16:04:26 +08:00
2026-08-03 16:04:26 +08:00
2026-08-08 21:05:58 +08:00
2026-08-08 21:05:58 +08:00
2026-08-08 21:05:58 +08:00
2026-08-04 17:36:14 +08:00
2026-07-31 18:37:34 +08:00
2026-08-04 17:36:14 +08:00
2026-08-08 20:02:36 +08:00
2026-08-08 20:02:36 +08:00
2026-08-08 20:02:36 +08:00
2026-07-31 16:49:55 +08:00
2026-07-31 16:49:55 +08:00
2026-07-31 16:49:55 +08:00
2026-08-09 01:25:24 +08:00
2026-08-09 01:25:24 +08:00
2026-08-09 01:25:24 +08:00
2026-08-04 17:36:14 +08:00
2026-07-30 21:04:00 +08:00
2026-08-04 17:36:14 +08:00
2026-08-04 13:20:28 +08:00
2026-08-04 13:20:28 +08:00
2026-08-04 13:20:28 +08:00
2026-08-04 17:36:14 +08:00
2026-07-28 19:43:56 +08:00
2026-08-04 17:36:14 +08:00
2026-08-07 16:49:20 +08:00
2026-08-07 16:49:20 +08:00
2026-08-07 16:49:20 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-04 20:54:42 +08:00
2026-07-29 21:09:02 +08:00
2026-08-04 20:54:42 +08:00
2026-08-06 19:52:16 +08:00
2026-08-06 19:52:16 +08:00
2026-08-06 19:52:16 +08:00
2026-08-02 01:29:04 +08:00
2026-08-02 01:29:04 +08:00
2026-08-02 01:29:04 +08:00
2026-08-02 20:09:05 +08:00
2026-08-02 20:09:05 +08:00
2026-08-02 20:09:05 +08:00
2026-07-31 13:49:41 +08:00
2026-07-31 13:49:41 +08:00
2026-07-31 13:49:41 +08:00
2026-08-07 22:04:04 +08:00
2026-08-07 22:04:04 +08:00
2026-08-07 22:04:04 +08:00
2026-08-04 17:36:14 +08:00
2026-07-30 19:38:18 +08:00
2026-08-04 17:36:14 +08:00
2026-08-08 01:10:57 +08:00
2026-08-08 01:10:57 +08:00
2026-08-08 01:10:57 +08:00
2026-08-04 15:25:30 +08:00
2026-08-04 15:25:30 +08:00
2026-08-04 15:25:30 +08:00
2026-08-03 18:35:26 +08:00
2026-08-03 18:35:26 +08:00
2026-08-03 18:35:26 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-03 18:06:14 +08:00
2026-08-03 16:04:26 +08:00
2026-08-03 16:04:26 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-04 15:25:30 +08:00
2026-08-04 15:25:30 +08:00
2026-08-04 15:25:30 +08:00
2026-07-30 20:26:33 +08:00
2026-07-30 20:26:33 +08:00
2026-07-30 20:26:33 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-04 15:25:30 +08:00
2026-08-04 15:25:30 +08:00
2026-08-04 15:25:30 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:24 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-07-31 15:49:59 +08:00
2026-07-31 15:49:59 +08:00
2026-07-31 15:49:59 +08:00
2026-08-09 01:27:09 +08:00
2026-08-09 01:27:09 +08:00
2026-08-09 01:27:09 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-08-09 01:21:12 +08:00
2026-07-31 13:24:30 +08:00
2026-07-31 13:24:30 +08:00
2026-07-31 13:24:30 +08:00
2026-07-31 20:39:53 +08:00
2026-07-31 20:39:53 +08:00
2026-07-31 20:39:53 +08:00
2026-07-31 14:08:13 +08:00
2026-07-31 14:08:13 +08:00
2026-07-31 14:08:13 +08:00
2026-07-31 14:28:03 +08:00
2026-07-31 14:28:03 +08:00
2026-07-31 14:28:03 +08:00
2026-08-04 17:36:14 +08:00
2026-07-31 02:34:52 -07:00
2026-08-04 17:36:14 +08:00
2026-08-01 06:15:16 -07:00
2026-08-01 06:15:16 -07:00
2026-08-01 06:15:16 -07:00
2026-08-04 15:18:48 +08:00
2026-08-04 15:18:48 +08:00
2026-08-04 15:18:48 +08:00
2026-08-07 16:49:20 +08:00
2026-08-07 16:49:20 +08:00
2026-08-07 16:49:20 +08:00
2026-08-06 06:29:06 +08:00
2026-08-06 06:29:06 +08:00
2026-08-06 06:29:06 +08:00
2026-08-08 20:11:21 +08:00
2026-08-08 20:11:21 +08:00
2026-08-08 20:11:21 +08:00
2026-08-07 20:50:36 +08:00
2026-08-07 20:50:36 +08:00
2026-08-07 20:50:36 +08:00
2026-08-08 20:11:21 +08:00
2026-08-08 20:11:21 +08:00
2026-08-08 20:11:21 +08:00
2026-08-06 06:29:06 +08:00
2026-08-06 06:29:06 +08:00
2026-08-06 06:29:06 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-06 14:41:17 +08:00
2026-08-06 14:41:17 +08:00
2026-08-06 14:41:17 +08:00
2026-08-03 20:08:41 +08:00
2026-08-03 20:08:41 +08:00
2026-08-03 20:08:41 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-04 15:55:07 +08:00
2026-08-04 15:55:07 +08:00
2026-08-04 15:55:07 +08:00
2026-08-06 21:38:47 +08:00
2026-08-05 07:09:16 +08:00
2026-08-06 21:38:47 +08:00
2026-08-04 15:42:39 +08:00
2026-08-04 15:42:39 +08:00
2026-08-04 15:42:39 +08:00
2026-08-04 14:14:12 +08:00
2026-08-04 14:14:12 +08:00
2026-08-04 14:14:12 +08:00
2026-08-07 22:52:19 +08:00
2026-08-07 22:52:19 +08:00
2026-08-07 22:52:19 +08:00
2026-08-06 00:21:34 +08:00
2026-08-06 00:21:34 +08:00
2026-08-06 00:21:34 +08:00
2026-08-04 21:02:03 +08:00
2026-08-04 21:02:03 +08:00
2026-08-04 21:02:03 +08:00
2026-08-05 17:00:48 +08:00
2026-08-05 17:00:48 +08:00
2026-08-05 17:00:48 +08:00
2026-08-06 11:49:03 +08:00
2026-08-06 11:49:03 +08:00
2026-08-06 11:49:03 +08:00
2026-08-06 16:27:27 +08:00
2026-08-06 16:27:27 +08:00
2026-08-06 16:27:27 +08:00
2026-08-08 18:10:21 +08:00
2026-08-08 18:10:21 +08:00
2026-08-08 18:10:21 +08:00
2026-08-05 23:26:39 -07:00
2026-08-05 23:26:39 -07:00
2026-08-05 23:26:39 -07:00
2026-08-06 18:54:53 +08:00
2026-08-06 18:54:53 +08:00
2026-08-06 18:54:53 +08:00
2026-08-08 21:05:58 +08:00
2026-08-08 21:05:58 +08:00
2026-08-08 21:05:58 +08:00
2026-08-06 23:00:01 +08:00
2026-08-06 23:00:01 +08:00
2026-08-06 23:00:01 +08:00
2026-08-06 11:12:48 +08:00
2026-08-06 11:12:48 +08:00
2026-08-06 11:12:48 +08:00
2026-08-06 23:00:01 +08:00
2026-08-06 23:00:01 +08:00
2026-08-06 23:00:01 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-08 16:53:23 +08:00
2026-08-07 16:45:50 +08:00
2026-08-07 16:45:50 +08:00
2026-08-07 16:45:50 +08:00
2026-08-07 05:06:21 -07:00
2026-08-07 05:06:21 -07:00
2026-08-07 05:06:21 -07:00
2026-08-08 15:05:50 +08:00
2026-08-08 15:05:50 +08:00
2026-08-08 15:05:50 +08:00
2026-08-08 10:46:58 +08:00
2026-08-08 10:46:58 +08:00
2026-08-08 10:46:58 +08:00
2026-08-08 13:15:52 +08:00
2026-08-08 13:15:52 +08:00
2026-08-08 13:15:52 +08:00
2026-08-09 12:34:48 +08:00
2026-08-09 12:34:48 +08:00
2026-08-09 12:34:48 +08:00