workspace-write leaves a persistent Low integrity label on the workspace root, breaking installers launched from that folder

📝 摘要

workspace-write 会在工作区根留下持久 Low 完整性标签。

📄 正文节选

Summary Using a broad user folder (e.g. `C:\Users\ \Downloads`) as the workspace in `workspace-write` mode causes the Windows ACL sandbox to apply its standing security descriptor to that folder, including an inheritable Low integrity label. The label survives the session and propagates to files cre……

节选自讨论正文开头，完整内容见原文

🔗 阅读原文

GitHub 讨论 #10270 ↗

💬 更多热门讨论