POC - Configurable ReadAcess in WorkspaceWrite SandboxPolicy

This commit is contained in:
Leo Shimonaka
2026-02-11 10:47:26 -08:00
parent d74fa8edd1
commit 04df7970fc
49 changed files with 1654 additions and 17 deletions

View File

@@ -116,6 +116,7 @@ where
// strict about what is writable.
exclude_tmpdir_env_var: true,
exclude_slash_tmp: true,
read_access: Default::default(),
},
codex_linux_sandbox_exe,
sandbox_cwd: writable_folder.as_ref().to_path_buf(),