4fe99b086f
## Summary - Updates the Linux bubblewrap sandbox args to mount a minimal `/dev` using `--dev /dev` instead of only binding `/dev/null`. tools needing entropy (git, crypto libs, etc.) can fail. - Changed mount order so `--dev /dev` is added before writable-root `--bind` mounts, preserving writable `/dev/*` submounts like `/dev/shm` ## Why Fixes sandboxed command failures when reading `/dev/urandom` (and similar standard device-node access). Fixes https://github.com/openai/codex/issues/12056 |
||
|---|---|---|
| .. | ||
| bwrap.rs | ||
| landlock.rs | ||
| lib.rs | ||
| linux_run_main.rs | ||
| main.rs | ||
| vendored_bwrap.rs | ||