nvaccess/nvda

Pull Requests Commits

secureProcess: add support for launching a process unelevated when called from an elevated process. Use 'removeElevation=True' on SecurePopen to do this.

michaelDCurran committed 311 days ago

6ce195f8

update test_secureProcess.py to support reworked SecureProcess keyword arguments. Including support for ui restrictions.

michaelDCurran committed 320 days ago

4b5cbd70

Update ART design document to reflect switch to secureProcess.

michaelDCurran committed 320 days ago

cd0290e9

Update art-sandbox design document to talk about secureProcess.

michaelDCurran committed 320 days ago

39287ed2

SecureProcess: If cwd is not given (and therefore should be inherited from parnet), check if the token allows access to the directory, and if not, uses the temp directory. this is better than just globbering the inherited parent CWD for no need if it actually can be accessed fine.

michaelDCurran committed 321 days ago

f8023d51

secureProcess: a restricted token now always is restricted to he base interactive groups + Restricted + the Logon SID. a retainuser boolean argument can be set to true to also include the User in the list of restricted SIDs. A separate createLeastPrivilegedPtoken function ahs been added which just todes token removal if a restricted token is not wanted. The SecureProcess constructor now takes a new restrictToken boolean argument which is True by default meaning a restricted token will be used. The allowUser argument has been renamed to retainuserInRestrictedToken. All this means that now there are conceptually several modes ART processes can be run in: 1. fully restricted (just enough for basic interaction / ability to read / execute program files and system binaries - essentially a generic interactive user with no access to any actual user files). 2. Restricted with access to the user's files. 3. Unrestricted - access to other groups the user is a part of.

michaelDCurran committed 321 days ago

8f20a255

secureProcess.token.restrictedToken: disable some more dangerous SIDs, including domain ones.

michaelDCurran committed 321 days ago

6409713a

secureProcess: implement maximum UI restrictions via the job object.

michaelDCurran committed 322 days ago

25cd0a4b

ART manager: remove old import

michaelDCurran committed 322 days ago

8d3d3a59

michaelDCurran committed 322 days ago

db194a97

Merge branch 'master' into art

michaelDCurran committed 322 days ago

ea75edc3

Replace the ART sandbox with a more official and complete secureProcess papckage, which supports integrity levels, restricted tokens, temporary windows tations /d esktops, running as local service etc.

michaelDCurran committed 322 days ago

92d43f17

Fix error when trying to read documents with malformed URL in links (#19289)

nvdaes committed 323 days ago

Verified bc2647d0

Created issue type for addon integration request (#18980)

gerald-hartig committed 323 days ago

Verified 52770cc0

Update eSpeak NG and Unicode CLDR (#19293)

SaschaCowley committed 323 days ago

Verified e6a466a5

Remove SAPI4 (#19290)

SaschaCowley committed 323 days ago

Verified 33cf7ad7

Update dependencies for 2026.1 (#19196)

SaschaCowley committed 323 days ago

Verified 250802a2

Optimize continuous recognition logic (#19291)

tianzeshi-study committed 323 days ago

Verified e419d0de

Beta to master #19288

seanbudd committed 324 days ago

Verified b5c8569b

Fix an error message in speech manager (#19275)

CyrilleB79 committed 324 days ago

Verified 2af478d2

Update symbols.dic for Finnish (#19287)

jkinnunen committed 324 days ago

Verified 855742d5

Fix disabling then enabling touch support (#19280)

SaschaCowley committed 325 days ago

Verified f97aa7b9

Improve CI docs and modularity for forking (#19254)

seanbudd committed 325 days ago

Verified 4e5f76a6

Update hyphen in fr symbols file as per English one #19278

CyrilleB79 committed 325 days ago

Verified 326f22f5

Update symbols.dic for bulgarian (#19274)

k-kolev1985 committed 325 days ago

Verified 3ad1b995

Beta to master #19273

seanbudd committed 326 days ago

Verified d8dcc7df

Update tracked translations from Crowdin (#19272)

github-actions[bot] committed 326 days ago

Verified 3a96bccc

Merge master to beta #19271

seanbudd committed 326 days ago

Verified 124db37c

fix crowdin sync to beta by running pyright locally (#19252)

seanbudd committed 326 days ago

Verified 282a5cd0

add admin notes for crowdin administration (#19255)

seanbudd committed 326 days ago

Verified 1b806b44

Older