POC - Configurable ReadAcess in WorkspaceWrite SandboxPolicy

2026-11-06 20:20:34 +00:00 · 2026-02-11 10:47:26 -08:00
parent d74fa8edd1
commit 04df7970fc
49 changed files with 1654 additions and 17 deletions
@@ -92,6 +92,7 @@ async fn run_cmd_result_with_writable_roots(
        // writing to in the sandbox.
        exclude_tmpdir_env_var: true,
        exclude_slash_tmp: true,
+        read_access: Default::default(),
    };
    let sandbox_program = env!("CARGO_BIN_EXE_codex-linux-sandbox");
    let codex_linux_sandbox_exe = Some(PathBuf::from(sandbox_program));