openai / openai/codex

Windows desktop: unified exec fails at apply deny-read ACLs in every workspace

Open
#40,047 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

app bug sandbox tool-calls windows-os
Dominant language
Rust
Stars
125k
Forks
19.4k
PR merge metrics
PR metrics pending

Description

Description

Every local command fails before process creation in the Windows ChatGPT/Codex desktop app.

Exact error

Rejected("Failed to create unified exec process: helper_unknown_error: apply deny-read ACLs")

Reproduction
  1. Open an existing local project.
  2. Ask Codex to run a read-only command such as git status.
  3. The command fails before execution.
  4. Create and open a completely empty folder.
  5. Ask Codex to read the current directory.
  6. The same error occurs.
Troubleshooting already completed
  • Fully restarted the ChatGPT/Codex desktop app
  • Rebooted Windows
  • Installed the latest available app update
  • Retested in an empty folder
  • Did not modify ACLs or run the app as administrator
  • Did not attempt a sandbox bypass
  • In-app feedback submission was also attempted but failed
Impact

No local shell command can start in any workspace. File editing, testing, and Git operations are blocked.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the failure on Windows with git status in both an existing project and an empty folder. Trace the unified exec path around the reported apply deny-read ACLs failure before process creation. Done means read-only commands, file editing, testing, and Git operations can start normally in both workspace types.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
desktop, devtools, operating-systems
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.