Codex Desktop bug ignores read-only sandbox config, agent can still write files
savitar2001 · ghdev · 2026-10-31
openai/codex issue #58507: a user set defaultpermissions = ":read-only" and approvalpolicy = "never" in /.codex/config.toml, but Codex Desktop on macOS (26.1027.30824) still creates every new thread with :workspace / workspaceWrite / on-request permissions, letting the agent actually write files (with timestamps as evidence). The composer offers no permission selector to change this per thread. The same config works correctly in the bundled CLI, indicating the Desktop app ignores the config — a real risk for users relying on sandbox restrictions.
More from coding & agent
- Karpathy reveals his coding setup: Claude Code desktop app, Opus 5.5 at medium effort — Yuchenj_UW · 2026-11-01
- GLM-5.3 shows strikingly different chain-of-thought under Claude Code vs Codex scaffolds — sebkrier · 2026-11-01
- Qwen Code Desktop v0.26.5 ships background agent tracking and split-view shortcuts — github-actions[bot] · 2026-11-01
- Indie hacker's viral video made with a Skill that auto-builds social-proof walls — yihui_indie · 2026-11-01
- Inside Deepgram's Builder's Lab: 45 devs live-building voice agents, legal questions raised — schwentker · 2026-11-01
- Vapi CEO: 'Promise something impossible, then deliver it' — voice agent insights — schwentker · 2026-11-01