openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-11-11 21:10:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: do not grant "node" user sudo access when using run_in_container.sh

Browse Source
This commit is contained in:
Michael Bolin
2025-04-24 13:15:13 -07:00
parent acc4acc81e
commit 05aa166673
2 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
codex-cli/scripts/run_in_container.sh
+4 -2
View File
@@ -57,8 +57,10 @@ docker run --name "$CONTAINER_NAME" -d \
codex \
sleep infinity
# Initialize the firewall inside the container.
docker exec "$CONTAINER_NAME" bash -c "sudo /usr/local/bin/init_firewall.sh"
# Initialize the firewall inside the container with root privileges. We avoid
# using sudo inside the container altogether by invoking the script directly
# as the root user via docker exec.
docker exec --user root "$CONTAINER_NAME" /usr/local/bin/init_firewall.sh
# Execute the provided command in the container, ensuring it runs in the work directory.
# We use a parameterized bash command to safely handle the command and directory.