mirror of https://github.com/openai/codex.git synced 2026-02-01 22:47:52 +00:00

Files

Michael Bolin 642b7566df fix: introduce AbsolutePathBuf as part of sandbox config (#7856 )

Changes the `writable_roots` field of the `WorkspaceWrite` variant of
the `SandboxPolicy` enum from `Vec<PathBuf>` to `Vec<AbsolutePathBuf>`.
This is helpful because now callers can be sure the value is an absolute
path rather than a relative one. (Though when using an absolute path in
a Seatbelt config policy, we still have to _canonicalize_ it first.)

Because `writable_roots` can be read from a config file, it is important
that we are able to resolve relative paths properly using the parent
folder of the config file as the base path.

2025-12-12 15:25:22 -08:00

src

fix: introduce AbsolutePathBuf as part of sandbox config (#7856 )

2025-12-12 15:25:22 -08:00

tests

fix: introduce AbsolutePathBuf as part of sandbox config (#7856 )

2025-12-12 15:25:22 -08:00

Cargo.toml

fix: introduce AbsolutePathBuf as part of sandbox config (#7856 )

2025-12-12 15:25:22 -08:00

README.md

fix: overhaul how we spawn commands under seccomp/landlock on Linux (#1086 )

2025-05-23 11:37:07 -07:00

README.md

codex-linux-sandbox

This crate is responsible for producing:

a codex-linux-sandbox standalone executable for Linux that is bundled with the Node.js version of the Codex CLI
a lib crate that exposes the business logic of the executable as run_main() so that
- the codex-exec CLI can check if its arg0 is codex-linux-sandbox and, if so, execute as if it were codex-linux-sandbox
- this should also be true of the codex multitool CLI