Approval retention issue on version 0.84.0 was working 0.83.0 on the same machine
Resolved 💬 0 comments Opened Jan 15, 2026 by VirtualAgentics Closed Jan 15, 2026
What version of Codex is running?
codex-cli 0.84.0
What subscription do you have?
chatgpt pro
Which model were you using?
gpt-5.2 (reasoning xhigh, summaries auto)
What platform is your computer?
Linux 6.14.0-1015-nvidia aarch64 aarch64
What terminal emulator and version are you using (if applicable)?
_No response_
What issue are you seeing?
codex-cli 0.84.0’s workspace-write sandbox uses unprivileged user namespaces + Landlock. On this machine it fails during sandbox setup because it can’t write /proc/self/
setgroups (EACCES), so Codex can’t sandbox-run commands and keeps escalating them for approval (which feels like “approve everything”).
- You can reproduce the root cause with codex sandbox linux --full-auto true (it panics with “error running landlock: Permission denied”). This box also has
kernel.apparmor_restrict_unprivileged_userns = 1, which is consistent with that failure.
What steps can reproduce the bug?
Uploaded thread: 019bbb75-e525-7482-82e0-8d4b03f5913c
What is the expected behavior?
_No response_
Additional information
_No response_