Suppress bwrap warning when sandboxing is bypassed (#16667)

Addresses #15282

Problem: Codex warned about missing system bubblewrap even when
sandboxing was disabled.

Solution: Gate the bwrap warning on the active sandbox policy and skip
it for danger-full-access and external-sandbox modes.
This commit is contained in:
Eric Traut
2026-04-03 10:54:30 -07:00
committed by GitHub
parent a3b3e7a6cc
commit 0f7394883e
5 changed files with 28 additions and 7 deletions
+5 -3
View File
@@ -470,8 +470,10 @@ fn emit_project_config_warnings(app_event_tx: &AppEventSender, config: &Config)
)));
}
fn emit_system_bwrap_warning(app_event_tx: &AppEventSender) {
let Some(message) = codex_core::config::system_bwrap_warning() else {
fn emit_system_bwrap_warning(app_event_tx: &AppEventSender, config: &Config) {
let Some(message) =
codex_core::config::system_bwrap_warning(config.permissions.sandbox_policy.get())
else {
return;
};
@@ -3564,7 +3566,7 @@ impl App {
let (app_event_tx, mut app_event_rx) = unbounded_channel();
let app_event_tx = AppEventSender::new(app_event_tx);
emit_project_config_warnings(&app_event_tx, &config);
emit_system_bwrap_warning(&app_event_tx);
emit_system_bwrap_warning(&app_event_tx, &config);
tui.set_notification_method(config.tui_notification_method);
let harness_overrides =