test: fix bwrap CI regressions

codex-rs/app-server/src/bespoke_event_handling.rs

@@ -2948,7 +2948,7 @@ mod tests {
                     id: event_turn_id,
                     msg: EventMsg::GuardianAssessment(assessment),
                 },
-                self.conversation_id.clone(),
+                self.conversation_id,
                 self.conversation.clone(),
                 self.thread_manager.clone(),
                 self.outgoing.clone(),

codex-rs/linux-sandbox/tests/suite/landlock.rs

@@ -311,13 +311,14 @@ async fn bwrap_dev_nodes_work_when_workspace_dot_codex_is_missing() {
     }
 
     let tmpdir = tempfile::tempdir().expect("tempdir");
+    let writable_roots = vec![tmpdir.path().to_path_buf()];
     let output = run_cmd_result_with_writable_roots_in_cwd(
         &[
             "bash",
             "-lc",
             ": >/dev/null && head -c 8 /dev/zero | od -An -tx1",
         ],
-        &[],
+        &writable_roots,
         tmpdir.path(),
         LONG_TIMEOUT_MS,
         /*use_legacy_landlock*/ false,