Cwcow policy changes - #2842

Open

Takuro Sato (takuro-sato) wants to merge 61 commits into

microsoft:mainfrom

takuro-sato:cwcow-policy-changes

Commits on May 7, 2026

CWCOW: Persist environment variable
Mahati Chamarthy (MahatiC)
committed
acdad47
CWCOW: Enforce MappedDirectory inside gcs-sidecar
Mahati Chamarthy (MahatiC)
committed
d83b752

Commits on Jun 1, 2026

Use Windows path in environment variable tests
Takuro Sato (takuro-sato)
committed
7fa1b7b
CWCOW: marshal sidecar exec rewrite via pointer
Takuro Sato (takuro-sato)
committed
6dc7c8f

Commits on Jun 2, 2026

CWCOW: strict-decode ProcessParameters in sidecar executeProcess
Takuro Sato (takuro-sato)
committed
8a9015b

Commits on Jun 23, 2026

Add test for executeProcess env var filtering
Takuro Sato (takuro-sato)
committed
e768db5

Commits on Jun 24, 2026

Commits on Jun 25, 2026

Commits on Jun 26, 2026

Commits on Jun 29, 2026

Update comments
Takuro Sato (takuro-sato)
committed
3fde0e5
Enforce container's init exec using the result of create_container policy
Takuro Sato (takuro-sato)
committed
bbe0c64
Remove an unnecessary TODO
Takuro Sato (takuro-sato)
committed
5930305
Remove the support of HostedSystem
Takuro Sato (takuro-sato)
committed
8da75d3
Fix printing Container
Takuro Sato (takuro-sato)
committed
9c42c06
Add log for container object as indented json
Takuro Sato (takuro-sato)
committed
96a404f
Revert "Add log for container object as indented json"
Takuro Sato (takuro-sato)
committed
dfd925f

Commits on Jun 30, 2026

Add comment on startContainer
Takuro Sato (takuro-sato)
committed
ea2e45a
Temporary comments
Takuro Sato (takuro-sato)
committed
aa8fe54

Commits on Jul 2, 2026

Add mounts enforcement point
Takuro Sato (takuro-sato)
committed
243936b
Apply result of allowStdio policy
Takuro Sato (takuro-sato)
committed
9a9e198

Commits on Jul 3, 2026

Commits on Jul 7, 2026

Commits on Jul 8, 2026

Enable log earlier for now
Takuro Sato (takuro-sato)
committed
f9547ff
Temporary comment
Takuro Sato (takuro-sato)
committed
c24a641

Commits on Jul 9, 2026

Commits on Jul 15, 2026

Commits on Jul 16, 2026

Note why Windows create-time mounts keep no state
Takuro Sato (takuro-sato)
committed
09645b9

Commits on Jul 17, 2026

Commits on Jul 22, 2026

Commits on Aug 4, 2026

Commits on Aug 5, 2026

Convert k (type WindowsRegistryKey) to registryKeyInternal instead of using struct literal
Takuro Sato (takuro-sato)
committed
d97d6cf

Commits on Aug 6, 2026

Check it's confidential before writing security context dir
Takuro Sato (takuro-sato)
committed
1090eb8

Commits on Aug 11, 2026

Commits on Aug 12, 2026

Run CI
Takuro Sato (takuro-sato)
committed
9dac913