On Tue, 20 Oct 2026 08:57:00 +0200, David Uhden Collado <[email protected]> wrote: > > OpenBSD does not currently provide a supported Codex sandbox backend. > pledge/unveil cannot reliably enforce these restrictions across > arbitrary subprocesses created through execve. > > The first patch rejects managed sandbox profiles during configuration > and session creation. > > The second rejects unsupported restrictions at command execution, > including managed network policies that cannot be enforced by a > proxy alone. > > Both are necessary to cover the different execution paths. > > Explicit danger-full-access execution remains available, as does > the option of running Codex inside external isolation. >
I had re-read your explanation and diffs a few times and I still does not understand that actually have you suggested. Can you stop using your LLM and write with extreamly simple sentence that you did and why? -- wbr, Kirill
