dsh-acl-sandbox-patch: DSH 0.1.7 Windows Sandbox Non-System Drive Workspace Fix
2026-10-15
DeepSeek Harness plugin
DeepSeek
DSH
ACL
sandbox
Windows
Safety
Plugin
Permission
masknull
repair
dsh-acl-sandbox-patch is a temporary workaround plugin for DSH 0.1.7 that addresses the complete failure of sandboxed commands in workspaces located on non-system drives. By wrapping the underlying API, it resolves the issue where `SetNamedSecurityInfoW` returns Win32 error 5 due to insufficient permissions, and handles token integrity control. After installation, DSH must be restarted to restore normal command execution; however, this compromises part of the integrity-labeling mechanism and carries risks of slower initial loading and abnormal behavior in older sessions.
Read More