## Summary - Updates the Linux bubblewrap sandbox args to mount a minimal `/dev` using `--dev /dev` instead of only binding `/dev/null`. tools needing entropy (git, crypto libs, etc.) can fail. - Changed mount order so `--dev /dev` is added before writable-root `--bind` mounts, preserving writable `/dev/*` submounts like `/dev/shm` ## Why Fixes sandboxed command failures when reading `/dev/urandom` (and similar standard device-node access). Fixes https://github.com/openai/codex/issues/12056 |
||
|---|---|---|
| .. | ||
| actions | ||
| codex | ||
| ISSUE_TEMPLATE | ||
| scripts | ||
| workflows | ||
| codex-cli-splash.png | ||
| dependabot.yaml | ||
| dotslash-config.json | ||
| pull_request_template.md | ||