VSCode Codex sandbox fails with bwrap loopback error and causes repeated approval prompts

What version of the IDE extension are you using?

26.616.31447

What subscription do you have?

ChatGPT Plus

Which IDE are you using?

VSCode 1.25

What platform is your computer?

Client: Fedora 44, Server Ubuntu Linux 24.04

What issue are you seeing?

In the Codex VSCode integration, many harmless local commands fail inside the sandbox with:

bwrap: loopback: Failed RTM_NEWADDR: Operation not permitted

This causes Codex to repeatedly request approval / escalation even for basic local development commands. The behavior is inconsistent: some commands work without approval, others fail immediately with the bwrap error.

What steps can reproduce the bug?

1. Open a local workspace in VSCode using Codex.
2. Use Codex to run harmless local commands in the workspace.
3. Commands such as the following fail without escalation:

pwd
php -l /var/www/admincore/app/backup.php

1. Other commands sometimes work without escalation, for example:

rg -n "Version:" /var/www/admincore/app/backup.php
git -C /var/www/admincore status --short

1. Codex then has to rerun affected commands with escalation, causing repeated approval prompts.

What is the expected behavior?

Harmless local commands such as pwd, php -l, git status, sed, and similar workspace-local verification commands should run in the sandbox without failing due to a Bubblewrap loopback/network namespace error.

At minimum, the sandbox should behave consistently and should not require repeated approval prompts for basic local commands that do not access the network or modify protected files.

Additional information

Environment:

• Ubuntu / Linux
• VSCode with Codex integration
• Local LAMP/PHP/MySQL project
• Workspace path: /var/www
• Filesystem sandbox / managed permissions enabled
• Network access restricted

Observed error:

bwrap: loopback: Failed RTM_NEWADDR: Operation not permitted

The problem started recently, possibly after a Codex or VSCode update. It does not appear to be related to the project code itself.

Examples:

• Fails: pwd
• Fails: php -l /var/www/admincore/app/backup.php
• Works: rg -n "Version:" /var/www/admincore/app/backup.php
• Works: git -C /var/www/admincore status --short

Even when using a more permissive/full-access mode, approval prompts still appeared frequently.

<img width="367" height="326" alt="Image" src="https://github.com/user-attachments/assets/f02edfb3-c90d-4dd1-9a19-85596e029652" />