Skip to content

0.124.0 breaks sandbox when default_permissions is present in the config #19299

@zeyugao

Description

@zeyugao

What version of Codex CLI is running?

codex-cli 0.124.0

What subscription do you have?

plus

Which model were you using?

gpt-5.5

What platform is your computer?

Linux 6.12.69 x86_64 x86_64

Linux 6.8.0-78-generic x86_64 x86_64

What terminal emulator and version are you using (if applicable)?

No response

What issue are you seeing?

Image

For search:

bwrap: execvp /home/user/.npm-global/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/codex/codex: No such file or directory

What steps can reproduce the bug?

Place in the ~/.codex/config.toml

default_permissions = "workspace"

[permissions.workspace.filesystem]
":minimal" = "read"
":project_roots" = "write"

What is the expected behavior?

No response

Additional information

It is the same behaviour as #17367, but in 0.123.0 it works well

It seems that the since switching to bubblewrap, the codex sandbox has been having frequent issues with the permissions.

Metadata

Metadata

Assignees

No one assigned

    Labels

    CLIIssues related to the Codex CLIbugSomething isn't workingconfigIssues involving config.toml, config keys, config merging, or config updatessandboxIssues related to permissions or sandboxing

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions