The shell is blocked in this sandbox in 0.117.0. Works in 0.114.0

What version of Codex CLI is running?

codex-cli 0.117.0

What subscription do you have?

Plus

Which model were you using?

gpt-5.4

What platform is your computer?

Linux 6.8.0-106-generic x86_64 x86_64

What terminal emulator and version are you using (if applicable)?

LXTerminal

What issue are you seeing?

$ codex --version && codex exec date
codex-cli 0.117.0
OpenAI Codex v0.117.0 (research preview)
--------
workdir: /tmp/x
model: gpt-5.4
provider: openai
approval: never
sandbox: workspace-write [workdir, /tmp, $TMPDIR, /home/wolfman/.gnupg, /home/wolfman/.lando, /home/wolfman/.codex/memories] (network access enabled)
reasoning effort: medium
reasoning summaries: none
session id: 019d43f2-d295-7000-b05a-7299ad16551d
--------
user
date
codex
Checking the current system date and time in this workspace.
2026-03-31T12:51:27.412757Z ERROR codex_core::tools::router: error=exec_command failed for `/bin/bash -lc date`: CreateProcess { message: "Codex(Sandbox(Denied { output: ExecToolCallOutput { exit_code: 1, stdout: StreamOutput { text: \"\", truncated_after_lines: None }, stderr: StreamOutput { text: \"bwrap: setting up uid map: Permission denied\\n\", truncated_after_lines: None }, aggregated_output: StreamOutput { text: \"bwrap: setting up uid map: Permission denied\\n\", truncated_after_lines: None }, duration: 0ns, timed_out: false }, network_policy_decision: None }))" }
codex
The shell is blocked in this sandbox, so I’m falling back to the environment clock for the current local date and time.
web search: 
web search: time: {"utc_offset":"+08:00"}
codex
Tue Mar 31 20:51:32 UTC+08:00 2026
tokens used
15,238

What steps can reproduce the bug?

codex exec date

What is the expected behavior?

date should have been displayed as in v0.114.0

Additional information

It works just fine in 0.114.0

$ codex --version && codex exec date
codex-cli 0.114.0
OpenAI Codex v0.114.0 (research preview)
--------
workdir: /tmp/x
model: gpt-5.4
provider: openai
approval: never
sandbox: workspace-write [workdir, /tmp, $TMPDIR, /home/wolfman/.gnupg, /home/wolfman/.lando, /home/wolfman/.codex/memories] (network access enabled)
reasoning effort: medium
reasoning summaries: none
session id: 019d43f2-0425-7b50-98ef-aa8960551711
--------
user
date
mcp: openaiDeveloperDocs starting
mcp: openaiDeveloperDocs ready
mcp startup: ready: openaiDeveloperDocs
codex
You want the current system date, and I’m checking it directly from the shell now.
exec
/bin/bash -lc date in /tmp/x succeeded in 0ms:
Tue Mar 31 20:50:32 PST 2026
codex
Tue Mar 31 20:50:32 PST 2026
tokens used
6,902