Jeffrey Quesnelle 7bc57545d6 feat(mxc): pass driver_config denied_paths to MXC deniedPaths (#5033) ...

Add optional MXC denied paths with validation against resolved filesystem grants and directories the workload can rename. Pass the denies to MXC with host ACL mutation fallback disabled.

Document path-based enforcement limits and cover namespace aliases and directory renames with regression tests.

Closes #5032

Signed-off-by: Jeffrey Quesnelle <emozilla@nousresearch.com>
Signed-off-by: Shailendra Singh <shailendras@nvidia.com>

2026-10-30 14:19:57 -07:00

..

openshell-binary-identity

fix(sandbox): cut executable identity hashing cost (#4221)

2026-10-07 14:26:33 +00:00

openshell-bootstrap

refactor(runtime): confine and reduce unsafe code (#4130)

2026-10-10 01:12:03 +00:00

openshell-cli

fix(mxc): pass native Windows build and HTTPS qualification

2026-10-13 22:45:17 -07:00

openshell-conformance

test(conformance): run driver suites with cargo (#3866)

2026-10-12 15:35:03 +00:00

openshell-core

fix(mxc): pass native Windows build and HTTPS qualification

2026-10-13 22:45:17 -07:00

openshell-driver-db-credstore

feat(api)!: use sandbox names as canonical RPC references (#3272)

2026-09-18 11:39:55 -07:00

openshell-driver-docker

fix(mxc): pass native Windows build and HTTPS qualification

2026-10-13 22:45:17 -07:00

openshell-driver-kubernetes

fix(mxc): pass native Windows build and HTTPS qualification

2026-10-13 22:45:17 -07:00

openshell-driver-kubernetes-secrets

fix(helm)!: reduce gateway Secret privileges (#3616)

2026-09-23 21:35:22 +00:00

openshell-driver-mxc

feat(mxc): pass driver_config denied_paths to MXC deniedPaths (#5033)

2026-10-30 14:19:57 -07:00

openshell-driver-podman

test(oci): add a shared Docker and Podman suite for image USER and WORKDIR (#3931)

2026-10-13 13:00:59 +00:00

openshell-driver-vault

feat(extensions)!: normalize protocol negotiation (#3352)

2026-09-21 13:19:39 -07:00

openshell-driver-vm

fix(mxc): pass native Windows build and HTTPS qualification

2026-10-13 22:45:17 -07:00

openshell-extension-core

chore(deps): replace ring with AWS-LC (#3243)

2026-09-09 17:57:42 +00:00

openshell-gateway

fix(mxc): pass native Windows build and HTTPS qualification

2026-10-13 22:45:17 -07:00

openshell-gateway-interceptors

feat(server): add operator-only provider credential retrieval (#4357)

2026-10-09 16:16:47 +00:00

openshell-isolation-interface

fix(mxc): pass native Windows build and HTTPS qualification

2026-10-13 22:45:17 -07:00

openshell-mxc-boundary

fix(mxc): resolve Windows lint and generated binding drift

2026-10-13 22:45:17 -07:00

openshell-ocsf

fix(server): audit proposal rejections in the gateway (#4281)

2026-10-13 00:01:58 +00:00

openshell-otel

fix(otel): enable gzip and https OTLP export (#4399)

2026-10-13 20:27:47 +00:00

openshell-otel-test-support

fix(otel): enable gzip and https OTLP export (#4399)

2026-10-13 20:27:47 +00:00

openshell-policy

refactor(mxc): adopt main isolation backend contracts

2026-10-13 22:45:16 -07:00

openshell-policy-schema

refactor(mxc): adopt main isolation backend contracts

2026-10-13 22:45:16 -07:00

openshell-prover

fix(windows): stabilize native ARM64 policy tests (#4617)

2026-10-15 11:00:54 -07:00

openshell-prover-cli

chore(build): remove bundled Z3 support (#3275)

2026-10-01 12:08:33 +00:00

openshell-providers

feat(providers): support stable credential placeholders (#3339)

2026-10-12 16:39:31 +00:00

openshell-sandbox

fix(mxc): pass native Windows build and HTTPS qualification

2026-10-13 22:45:17 -07:00

openshell-sandbox-backend

fix(mxc): pass native Windows build and HTTPS qualification

2026-10-13 22:45:17 -07:00

openshell-sdk

feat(server): add operator-only provider credential retrieval (#4357)

2026-10-09 16:16:47 +00:00

openshell-server

test(windows): backport server test repairs from #4862

2026-10-30 13:47:50 -07:00

openshell-server-macros

docs: remove the architecture directory (#3799)

2026-09-29 17:35:22 +00:00

openshell-supervisor

fix(windows): stabilize native ARM64 policy tests (#4617)

2026-10-15 11:00:54 -07:00

openshell-supervisor-middleware

feat(extensions)!: normalize protocol negotiation (#3352)

2026-09-21 13:19:39 -07:00

openshell-supervisor-middleware-builtins

feat(extensions)!: normalize protocol negotiation (#3352)

2026-09-21 13:19:39 -07:00

openshell-supervisor-network

test(mxc): verify direct host localhost connectivity

2026-10-13 22:45:17 -07:00

openshell-supervisor-process

fix(mxc): pass native Windows build and HTTPS qualification

2026-10-13 22:45:17 -07:00

openshell-tui

feat(providers): add CLI label creation and filtering (#4265)

2026-10-13 16:14:35 +00:00

openshell-vfio

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00