0.124.0 breaks sandbox when default_permissions is present in the config

What version of Codex CLI is running?

codex-cli 0.124.0

What subscription do you have?

plus

Which model were you using?

gpt-5.5

What platform is your computer?

Linux 6.12.69 x86_64 x86_64

Linux 6.8.0-78-generic x86_64 x86_64

What terminal emulator and version are you using (if applicable)?

_No response_

What issue are you seeing?

<img width="846" height="372" alt="Image" src="https://github.com/user-attachments/assets/d8b7f4e5-5742-4cde-aaef-c78114846068" />

For search:

bwrap: execvp /home/user/.npm-global/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/codex/codex: No such file or directory

What steps can reproduce the bug?

Place in the ~/.codex/config.toml

default_permissions = "workspace"

[permissions.workspace.filesystem]
":minimal" = "read"
":project_roots" = "write"

What is the expected behavior?

_No response_

Additional information

It is the same behaviour as https://github.com/openai/codex/issues/17367, but in 0.123.0 it works well

It seems that the since switching to bubblewrap, the codex sandbox has been having frequent issues with the permissions.