mirror of
https://github.com/openai/codex.git
synced 2026-04-27 08:05:51 +00:00
a71fc47cf8
Addresses #11555 Problem: macOS malloc stack-logging diagnostics could leak into the TUI composer and get misclassified as pasted user input. Solution: Strip `MallocStackLogging*` and `MallocLogFile*` during macOS pre-main hardening and document the additional env cleanup.
9 lines
386 B
Markdown
9 lines
386 B
Markdown
# codex-process-hardening
|
|
|
|
This crate provides `pre_main_hardening()`, which is designed to be called pre-`main()` (using `#[ctor::ctor]`) to perform various process hardening steps, such as
|
|
|
|
- disabling core dumps
|
|
- disabling ptrace attach on Linux and macOS
|
|
- removing dangerous or noisy environment variables such as `LD_PRELOAD`,
|
|
`DYLD_*`, and macOS malloc stack-logging controls
|