fix(sandbox): remove a symlink itself in UnixLocal rm, not its target - #4830

Open

coderdailyone wants to merge 10 commits into

openai:mainfrom

coderdailyone:fix/unix-local-rm-symlink

Commits on Sep 2, 2026

fix(sandbox): remove a symlink itself in UnixLocal rm, not its target

coderdailyone
and
claude
committed
6ff8a29
fix(sandbox): validate raw rm paths before splitting off the leaf

coderdailyone
and
claude
committed
e505c43
fix(sandbox): validate the rm leaf through the workspace path policy

coderdailyone
and
claude
committed
3509f30

Commits on Sep 4, 2026

fix(sandbox): address the workspace root through its resolved form in the leaf-preserving check

coderdailyone
and
claude
committed
2bf051c
fix(sandbox): recognize a noncanonical spelling of the workspace root alias

coderdailyone
and
claude
committed
4eebfa2

Commits on Sep 5, 2026

fix(sandbox): enforce sticky-directory ownership in the user-scoped rm probe

coderdailyone
and
claude
committed
4b3a17d
fix(sandbox): let root through the sticky probe and canonicalize the root comparison

coderdailyone
and
claude
committed
001a24c

Commits on Sep 6, 2026

fix(sandbox): probe sticky-directory entry ownership with stat, not GNU find

coderdailyone
and
claude
committed
e25457b
fix(sandbox): let apply_patch delete_file and move_to remove the named symlink, not its target

coderdailyone
and
claude
committed
4736a7a

Commits on Sep 7, 2026

fix(sandbox): resolve symlinked grant roots fully and let apply_patch delete dangling or outward links

coderdailyone
and
claude
committed
4e3f519