mirror of
https://github.com/openai/codex.git
synced 2026-08-25 13:28:55 +00:00
ac3da4fb1a
Filesystem helper requests currently turn symbolic `:workspace_roots` permissions into a sandbox policy before applying the workspace roots from the filesystem sandbox context. This can accidentally broaden filesystem access to the cwd instead of limiting it to the selected workspace roots. Materialize project-root permissions using the context workspace roots before deriving the filesystem sandbox policy. The same converted roots are then reused when constructing the sandbox command, keeping policy enforcement and process setup aligned. Adds a remote filesystem integration test that verifies a file inside the selected workspace root is readable while a sibling under the cwd is denied. ## Validation - `just test -p codex-exec-server remote_read_file_materializes_environment_workspace_roots` (macOS, outside the outer Seatbelt sandbox)