{"record":{"id":"6dce6d2f21e32620","repo":"openai/codex","slug":"apply-seccomp-then-exec-is-incompatible-with-u","errorCode":null,"errorMessage":"--apply-seccomp-then-exec is incompatible with --use-legacy-landlock","messagePattern":"--apply-seccomp-then-exec is incompatible with --use-legacy-landlock","errorType":"panic","errorClass":null,"httpStatus":null,"severity":"error","filePath":"codex-rs/linux-sandbox/src/linux_run_main.rs","lineNumber":377,"sourceCode":"}\n\nfn resolve_permission_profile(\n    permission_profile: Option<PermissionProfile>,\n) -> Result<EffectivePermissions, ResolvePermissionProfileError> {\n    let permission_profile =\n        permission_profile.ok_or(ResolvePermissionProfileError::MissingConfiguration)?;\n    let (file_system_sandbox_policy, network_sandbox_policy) =\n        permission_profile.to_runtime_permissions();\n    Ok(EffectivePermissions {\n        permission_profile,\n        file_system_sandbox_policy,\n        network_sandbox_policy,\n    })\n}\n\nfn ensure_inner_stage_mode_is_valid(apply_seccomp_then_exec: bool, use_legacy_landlock: bool) {\n    if apply_seccomp_then_exec && use_legacy_landlock {\n        panic!(\"--apply-seccomp-then-exec is incompatible with --use-legacy-landlock\");\n    }\n}\n\nfn ensure_legacy_landlock_mode_supports_policy(\n    use_legacy_landlock: bool,\n    file_system_sandbox_policy: &FileSystemSandboxPolicy,\n    network_sandbox_policy: NetworkSandboxPolicy,\n    sandbox_policy_cwd: &Path,\n) {\n    if use_legacy_landlock\n        && file_system_sandbox_policy\n            .needs_direct_runtime_enforcement(network_sandbox_policy, sandbox_policy_cwd)\n    {\n        panic!(\n            \"permission profiles requiring direct runtime enforcement are incompatible with --use-legacy-landlock\"\n        );\n    }\n}","sourceCodeStart":359,"sourceCodeEnd":395,"githubUrl":"https://github.com/openai/codex/blob/339751715c64496cb86246bfb3935f40e309dd3d/codex-rs/linux-sandbox/src/linux_run_main.rs#L359-L395","documentation":"Error \"--apply-seccomp-then-exec is incompatible with --use-legacy-landlock\" thrown in openai/codex.","triggerScenarios":"Thrown at codex-rs/linux-sandbox/src/linux_run_main.rs:377 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"339751715c64496cb86246bfb3935f40e309dd3d","analyzedAt":"2026-08-25T05:35:09.876Z","schemaVersion":2},"datasetVersion":"2026-08-25T06:17:31.827Z"}