mirror of https://github.com/pchuan98/codex.git synced 2026-07-01 00:31:56 +08:00

Files

T

Michael Bolin 8595237505 fix: ensure cwd for conversation and sandbox are separate concerns (#3874 )

Previous to this PR, both of these functions take a single `cwd`:


https://github.com/openai/codex/blob/71038381aa0f51aa62e1a2bcc7cbf26a05b141f3/codex-rs/core/src/seatbelt.rs#L19-L25


https://github.com/openai/codex/blob/71038381aa0f51aa62e1a2bcc7cbf26a05b141f3/codex-rs/core/src/landlock.rs#L16-L23

whereas `cwd` and `sandbox_cwd` should be set independently (fixed in
this PR).

Added `sandbox_distinguishes_command_and_policy_cwds()` to
`codex-rs/exec/tests/suite/sandbox.rs` to verify this.

8595237505 · 2025-09-18 14:37:06 -07:00

History

src

Fix AF_UNIX, sockpair, recvfrom in linux sandbox (#2309 )

2025-08-14 17:12:41 -07:00

tests

fix: ensure cwd for conversation and sandbox are separate concerns (#3874 )

2025-09-18 14:37:06 -07:00

Cargo.toml

feat: Run cargo shear during CI (#3338 )

2025-09-09 01:05:08 +00:00

README.md

fix: overhaul how we spawn commands under seccomp/landlock on Linux (#1086 )

2025-05-23 11:37:07 -07:00

README.md

codex-linux-sandbox

This crate is responsible for producing:

a codex-linux-sandbox standalone executable for Linux that is bundled with the Node.js version of the Codex CLI
a lib crate that exposes the business logic of the executable as run_main() so that
- the codex-exec CLI can check if its arg0 is codex-linux-sandbox and, if so, execute as if it were codex-linux-sandbox
- this should also be true of the codex multitool CLI