Prekshi Vyas 2d5c9bfaab fix(network): scope Windows egress by socket owner (#3491) ...

* fix(ocsf): attribute MXC proxy events to sandboxes

NVBug 6783086

Signed-off-by: Prekshi Vyas <prekshiv@nvidia.com>

* fix(network): scope Windows egress by socket owner

Resolve each accepted Windows proxy connection to its unique owning PID and executable before evaluating binary-scoped network policy. Fail closed when ownership or process identity cannot be established, and cover allowed and undeclared child processes with a real MXC regression.

* fix(network): preserve sandbox context with socket owners

Signed-off-by: Prekshi Vyas <prekshiv@nvidia.com>
(cherry picked from commit 32ea316deb6c83c157fdf2de4a2cdc3a7d2da1e3)

* fix(network): harden Windows process identity

Signed-off-by: Prekshi Vyas <prekshiv@nvidia.com>

---------

Signed-off-by: Prekshi Vyas <prekshiv@nvidia.com>

2026-09-22 20:22:40 -07:00

..

data

fix(network): normalize Windows binary paths (NVBug 6782969) (#3482)

2026-09-22 13:47:25 -07:00

src

fix(network): scope Windows egress by socket owner (#3491)

2026-09-22 20:22:40 -07:00

testdata

refactor(openshell-sandbox): Split sandbox into process and network subcrates. (#1650)

2026-06-15 15:16:23 -04:00

tests

refactor(inference): remove managed inference routes (#3195)

2026-09-09 18:47:22 +00:00

Cargo.toml

fix(network): normalize Windows binary paths (NVBug 6782969) (#3482)

2026-09-22 13:47:25 -07:00