From 21e99b818c83c95b85a927c033ba04a5a965f5fc Mon Sep 17 00:00:00 2001 From: daveaitel-openai Date: Tue, 20 Jan 2026 12:08:01 -0500 Subject: [PATCH] Restore read-only mounts before landlock --- codex-rs/linux-sandbox/src/landlock.rs | 3 +++ 1 file changed, 3 insertions(+) diff --git a/codex-rs/linux-sandbox/src/landlock.rs b/codex-rs/linux-sandbox/src/landlock.rs index 772176fc90..c708836cda 100644 --- a/codex-rs/linux-sandbox/src/landlock.rs +++ b/codex-rs/linux-sandbox/src/landlock.rs @@ -7,6 +7,8 @@ use codex_core::error::SandboxErr; use codex_core::protocol::SandboxPolicy; use codex_utils_absolute_path::AbsolutePathBuf; +use crate::mounts::apply_read_only_mounts; + use landlock::ABI; use landlock::Access; use landlock::AccessFs; @@ -40,6 +42,7 @@ pub(crate) fn apply_sandbox_policy_to_current_thread( } if !sandbox_policy.has_full_disk_write_access() { + apply_read_only_mounts(sandbox_policy, cwd)?; let writable_roots = sandbox_policy .get_writable_roots_with_cwd(cwd) .into_iter()