Files

Michael Bolin 8595237505 fix: ensure cwd for conversation and sandbox are separate concerns (#3874 )

Previous to this PR, both of these functions take a single `cwd`:


71038381aa/codex-rs/core/src/seatbelt.rs (L19-L25)


71038381aa/codex-rs/core/src/landlock.rs (L16-L23)

whereas `cwd` and `sandbox_cwd` should be set independently (fixed in
this PR).

Added `sandbox_distinguishes_command_and_policy_cwds()` to
`codex-rs/exec/tests/suite/sandbox.rs` to verify this.

2025-09-18 14:37:06 -07:00

src

Fix AF_UNIX, sockpair, recvfrom in linux sandbox (#2309 )

2025-08-14 17:12:41 -07:00

tests

fix: ensure cwd for conversation and sandbox are separate concerns (#3874 )

2025-09-18 14:37:06 -07:00

Cargo.toml

feat: Run cargo shear during CI (#3338 )

2025-09-09 01:05:08 +00:00

README.md

fix: overhaul how we spawn commands under seccomp/landlock on Linux (#1086 )

2025-05-23 11:37:07 -07:00

README.md

codex-linux-sandbox

This crate is responsible for producing:

a codex-linux-sandbox standalone executable for Linux that is bundled with the Node.js version of the Codex CLI
a lib crate that exposes the business logic of the executable as run_main() so that
- the codex-exec CLI can check if its arg0 is codex-linux-sandbox and, if so, execute as if it were codex-linux-sandbox
- this should also be true of the codex multitool CLI