Unverified80% confidenceFactTime unknown
Codex在macOS上使用Apple的Seatbelt沙盒技术，在Linux上通过网络命名空间实现隔离
1
Sources
80%
Confidence
Long-term
Relevance
6/1/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIn Full Auto mode, Codex CLI uses Apple Seatbelt on macOS and Docker containers or kernel security modules such as Landlock on Linux to restrict the AI's scope of operations.78% similarVerifiedmacOS's sandbox mechanism is based on Apple's App Sandbox framework, achieving file system isolation and network access restrictions through kernel-level permission controls.74% similarUnverifiedmacOS的沙箱机制（Seatbelt/sandbox-exec）通过SBPL（Sandbox Profile Language）精确定义允许的文件访问路径和网络目标72% similarUnverifiedEven when the Mac is on the lock screen, Codex can still operate in the background, but the screenshot function will fail in the locked state — this is a system-level security policy in which macOS restricts screen capture APIs such as CGWindowListCreateImage for security reasons.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/21993API
curl https://kongchang.com/api/v1/knowledge/claims/21993MCP
get_claim(id=21993)