Unverified80% confidenceFactTime unknown
Codex在macOS上使用Apple的Seatbelt沙盒技术，在Linux上通过网络命名空间实现隔离
1
Sources
80%
Confidence
Long-term
Relevance
6/1/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIn Full Auto mode, Codex CLI uses Apple Seatbelt on macOS and Docker containers or kernel security modules such as Landlock on Linux to restrict the AI's scope of operations.78% similarVerifiedmacOS's sandbox mechanism is based on Apple's App Sandbox framework, achieving file system isolation and network access restrictions through kernel-level permission controls.74% similarUnverifiedmacOS's sandbox mechanism (Seatbelt/sandbox-exec) uses SBPL (Sandbox Profile Language) to precisely define allowed file access paths and network destinations.72% similarUnverifiedApple Magic devices use Bluetooth Low Energy (BLE) protocol to establish an exclusive binding relationship with a Mac, with the pairing key stored in the system's Bluetooth configuration profile.67% similarUnverifiedEven when the Mac is on the lock screen, Codex can still operate in the background, but the screenshot function will fail in the locked state — this is a system-level security policy in which macOS restricts screen capture APIs such as CGWindowListCreateImage for security reasons.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/21993API
curl https://kongchang.com/api/v1/knowledge/claims/21993MCP
get_claim(id=21993)