Linux sandbox still fails with `bwrap: Failed to make / slave: Permission denied` on codex-cli 0.130.0 while legacy Landlock works

What version of Codex CLI is running?

0.130

What subscription do you have?

pro

Which model were you using?

_No response_

What platform is your computer?

_No response_

What terminal emulator and version are you using (if applicable)?

_No response_

Codex doctor report

What issue are you seeing?

Summary

openai/codex#15434 is closed, but I can still reproduce the same Linux sandbox failure on codex-cli 0.130.0.

The default sandbox path fails with:

bwrap: Failed to make / slave: Permission denied

But the legacy Landlock path works for the same minimal command.

Expected behavior

codex sandbox linux -- pwd should either:

• run successfully,
• fall back to the working legacy Landlock path when bwrap cannot perform the required mount propagation step, or
• return an actionable error message that points to the workaround.

Actual behavior

The default Linux sandbox path fails immediately with:

bwrap: Failed to make / slave: Permission denied

The same command succeeds when --enable use_legacy_landlock is used.

Environment

• codex-cli 0.130.0
• bubblewrap 0.6.1
• Linux kernel 5.15
• Reproduced in a containerized Linux environment using overlayfs

What steps can reproduce the bug?

Reproduction

$ codex sandbox linux -- pwd
bwrap: Failed to make / slave: Permission denied

$ codex sandbox linux --enable use_legacy_landlock -- pwd
prints working directory successfully

The failure is reproducible with a minimal command like pwd.

What is the expected behavior?

_No response_

Additional information

_No response_