gpt-5.6-sol xhigh effort constantly ignores my permissions sandbox
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 125k
- Forks
- 19.5k
- PR merge metrics
- PR metrics pending
Description
What version of Codex CLI is running?
codex-cli 0.147.0
What subscription do you have?
Pro
Which model were you using?
gpt-5.6-sol
What platform is your computer?
Darwin 25.6.0 arm64 arm
What terminal emulator and version are you using (if applicable)?
iTerm2
Codex doctor report
What issue are you seeing?
No matter what I set in codex settings for sandboxing to a workspace - it politely asks for permissions before asking privileged filesystem e.g. ~/Library /Volumes etc. Then after a one-off allow, it inevitably ignores those rules in future sessions.
What steps can reproduce the bug?
Uploaded thread: 019fed98-bbdf-74f3-a209-11883a5a942d
What is the expected behavior?
Codex respects my permissions. Claude does
Additional information
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the Codex CLI sandbox settings and the uploaded thread 019fed98-bbdf-74f3-a209-11883a5a942d. Reproduce the behavior on macOS with workspace sandboxing, then compare permissions before and after a one-off allow across sessions. Done means the configured workspace permissions continue to be respected without repeatedly granting access to paths such as ~/Library or /Volumes.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100