Skip to content

Resolve bwrap from trusted PATH entry#15892

Closed
viyatb-oai wants to merge 1 commit intomainfrom
codex/viyatb/fix-bwrap-path-only
Closed

Resolve bwrap from trusted PATH entry#15892
viyatb-oai wants to merge 1 commit intomainfrom
codex/viyatb/fix-bwrap-path-only

Conversation

@viyatb-oai
Copy link
Copy Markdown
Collaborator

Root cause: Codex only checked /usr/bin/bwrap, missing valid installs in /usr/local/bin, Homebrew, and Nix. Fix: resolve bwrap from PATH, canonicalize the match, and skip entries that resolve under the current working directory so repo-local shims are not trusted. Validation: cargo test -p codex-core bwrap --lib; cargo test -p codex-linux-sandbox; just fix -p codex-core; just fix -p codex-linux-sandbox; just fmt; just argument-comment-lint.

@viyatb-oai
Copy link
Copy Markdown
Collaborator Author

Closing as duplicate; reusing #15791 for the path-only change.

@viyatb-oai viyatb-oai closed this Mar 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant