macOS sandbox preventing dotnet build CSSM_ModuleLoad() Error
Open 💬 5 comments Opened Oct 8, 2025 by Meowzz95
💡 Likely answer: A maintainer (etraut-openai, contributor)
responded on this thread — see the highlighted reply below.
What version of Codex is running?
codex-cli 0.45.0
Which model were you using?
gpt-5-codex high
What platform is your computer?
Darwin 25.0.0 arm64 arm
What steps can reproduce the bug?
Ask codex to build a dotnet solution
• Ran dotnet build Main/Main.sln
└ failed in sandbox: CSSM_ModuleLoad(): One or more parameters passed to a function were not
valid.
I get this output from codex
but somehow codex is able figure out a way to circulate this, but it always fail at first and try multiple times. I think it is a waste of token/compute, so filing a bug report here.
What is the expected behavior?
It should be able to run dotnet build
Or at least provide a clear instruction on what folder we need to whitelist in writable_roots to allow it to work
What do you see instead?
failed in sandbox: CSSM_ModuleLoad(): One or more parameters passed to a function were not
valid.
Additional information
_No response_
5 Comments
do anybody care about dotnet?
Same issue. Codex app - cli 0.98 macos
If someone in the community is interested in investigating this issue, we'd welcome a root cause analysis.
I just hit this myself and found it was basically unable to run any sort of
dotnet testor benchmarks. Enabling "full access" temporarily was a workaround, but yeah, it'd be nice to know what was actually blocked so I could be more specific about it.Something I noticed when working with Codex in VS Code was it needed full permissions because VS Test opens a socket to communicate back to the
dotnetprocess and without full permissions it couldn't do that. Unclear if this is related. It's not the same error message, but it's the same end result - being unable to run tests.Been trying out Codex while it's free because of the OS X App release. Turns out Codex is useless as a ASP.NET developer on Mac because of this bug. Good thing I didn't have to spend money on a subscription to find out.