From 4978f1b9f2fcc1b4b5de1d32fe2c8e594ff00437 Mon Sep 17 00:00:00 2001 From: Winston Howes Date: Fri, 29 May 2026 17:45:40 -0700 Subject: [PATCH] Drop unused core landlock CA wiring --- codex-rs/core/src/landlock.rs | 10 +--------- 1 file changed, 1 insertion(+), 9 deletions(-) diff --git a/codex-rs/core/src/landlock.rs b/codex-rs/core/src/landlock.rs index 33d523228f..c117f706e1 100644 --- a/codex-rs/core/src/landlock.rs +++ b/codex-rs/core/src/landlock.rs @@ -6,7 +6,6 @@ use codex_protocol::models::PermissionProfile; use codex_sandboxing::landlock::CODEX_LINUX_SANDBOX_ARG0; use codex_sandboxing::landlock::allow_network_for_proxy; use codex_sandboxing::landlock::create_linux_sandbox_command_args_for_permission_profile; -use codex_sandboxing::with_managed_mitm_ca_readable_root; use codex_utils_absolute_path::AbsolutePathBuf; use std::collections::HashMap; use std::path::Path; @@ -34,18 +33,11 @@ pub async fn spawn_command_under_linux_sandbox

( where P: AsRef, { - let managed_mitm_ca_trust_bundle_path = - network.and_then(NetworkProxy::managed_mitm_ca_trust_bundle_path); - let permission_profile = with_managed_mitm_ca_readable_root( - permission_profile.clone(), - managed_mitm_ca_trust_bundle_path.as_ref(), - sandbox_policy_cwd.as_path(), - ); let network_sandbox_policy = permission_profile.network_sandbox_policy(); let args = create_linux_sandbox_command_args_for_permission_profile( command, command_cwd.as_path(), - &permission_profile, + permission_profile, sandbox_policy_cwd, use_legacy_landlock, allow_network_for_proxy(/*enforce_managed_network*/ false),