Copilot CLI macOS sandbox blocks Gradle daemon on localhost despite local networking being allowed
nugarov · ghdev · 2026-10-10
A GitHub copilot-cli issue reports that on macOS, even with the sandbox configured to allow both outbound and local networking, Gradle cannot run even an offline help task: the daemon starts and listens on localhost, but the client connection fails with java.net.SocketException: Operation not permitted before any task executes. Disabling the sandbox makes the identical command succeed.
Reproduced on Copilot CLI 1.0.93 and 1.0.95 with Gradle wrapper 9.1.0, Java 21 (Corretto), macOS 26.6.2 ARM64. The reporter argues that if the local-network setting intentionally excludes host loopback, /sandbox policy should say so and document a supported way to permit the required connection instead of forcing users to disable the sandbox entirely.
More from coding & agent
- Monid ranks agent tools by real usage: TinyFish leads with 754K weekly transactions — HeyAmit_ · 2026-10-23
- Claude cut a 2.6-hour video export to 20 minutes — but only after being told to rebuild the server — byhewar · 2026-10-23
- OpenJet claims Qwen3.8-27B coding runs 1.9x faster than llama.cpp on one RTX 3090 — JeremyCMorgan · 2026-10-23
- Building an autonomous SEO agent in Hermes with three skills: programmatic pages, Keywords Everywhere, DataForSEO — EXM7777 · 2026-10-23
- Building a sports betting AI agent with onchain execution and human approval by default: architecture and lessons — Dry-Comfortable-2678 · 2026-10-23
- Capy 0.5.0 lets Claude Pro/Max subscribers reuse their plan quota, adds OIDC cloud access — garrytan · 2026-10-23