openai / openai/codex

Codex App for Windows times out after submitting a prompt when the enterprise requirements policy contains permissions.filesystem.deny_read.

Open
#40,831 4 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

app bug sandbox windows-os
Dominant language
Rust
Stars
125k
Forks
19.4k
PR merge metrics
PR metrics pending

Description

What version of the Codex App are you using (From “About Codex” dialog)?

26.820

What subscription do you have?

Enterprise

What platform is your computer?

Windows 11 Windows sandbox requirement: elevated

What issue are you seeing?

Observed:

  • Codex App opens normally.
  • Model selector works.
  • A new chat can be created.
  • After submitting a prompt, the turn waits and eventually times out.
  • No codex-windows-sandbox-setup process remains.
  • No .codex/.sandbox/setup_error.json or sandbox.log is generated.

Control:
Removing only permissions.filesystem.deny_read restores normal operation.

The same behavior occurs with tilde paths and absolute Windows glob paths.

What steps can reproduce the bug?

Minimal requirement:

[permissions.filesystem]
deny_read = [
"C:/Users/*/.ssh/**"
]

start new chat after requirments.toml loaded.

What is the expected behavior?

No response

Additional information

#36087

https://github.com/openai/codex/issues/34842

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce with requirements.toml containing permissions.filesystem.deny_read and a Windows 11 sandbox, then submit a prompt in a new chat. Inspect whether codex-windows-sandbox-setup runs and whether .codex/.sandbox/setup_error.json or sandbox.log appears. Done means prompts complete normally while the deny_read rule remains configured.

Written by the indexing model from the issue text.

Assessment

Domain
desktop, operating-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.