alt Hacker NewsMy codex just uses python to write files around the sandbox when I ask it to patch a sdk outside its path.
Replies
Sharlin • today at 11:58 AM
It's definitely not a sandbox if you can just "use python to write files" outside of it o_O
➕ show 1 reply
Is it asking you permission to run that python command? If so, then that's expected: commands that you approve get to run without the sandbox.
The point is that Codex can (by default) run commands on its own, without approval (e.g., running `make` on the project it's working on), but they're subject to the imposed OS sandbox.
This is controlled by the `--sandbox` and `--ask-for-approval` arguments to `codex`.