permissions: make runtime config profile-backed

This commit is contained in:
Michael Bolin
2026-04-24 14:50:48 -07:00
parent 7ccc91a776
commit f5c6803c00
55 changed files with 1013 additions and 577 deletions
+2 -5
View File
@@ -24,8 +24,7 @@ async fn spawn_command_under_sandbox(
use codex_core::exec::build_exec_request;
use codex_core::sandboxing::SandboxPermissions;
use codex_protocol::config_types::WindowsSandboxLevel;
use codex_protocol::permissions::FileSystemSandboxPolicy;
use codex_protocol::permissions::NetworkSandboxPolicy;
use codex_protocol::models::PermissionProfile;
use std::process::Stdio;
let codex_linux_sandbox_exe = None;
@@ -43,9 +42,7 @@ async fn spawn_command_under_sandbox(
justification: None,
arg0: None,
},
sandbox_policy,
&FileSystemSandboxPolicy::from_legacy_sandbox_policy_for_cwd(sandbox_policy, sandbox_cwd),
NetworkSandboxPolicy::from(sandbox_policy),
&PermissionProfile::from_legacy_sandbox_policy(sandbox_policy),
sandbox_cwd,
&codex_linux_sandbox_exe,
/*use_legacy_landlock*/ false,