aboutsummaryrefslogtreecommitdiffstats
path: root/misc/codex/files
diff options
context:
space:
mode:
Diffstat (limited to 'misc/codex/files')
-rw-r--r--misc/codex/files/patch-codex-rs_cli_Cargo.toml12
-rw-r--r--misc/codex/files/patch-codex-rs_cli_src_main.rs12
-rw-r--r--misc/codex/files/patch-codex-rs_cli_src_pre__main__hardening.rs60
-rw-r--r--misc/codex/files/patch-codex-rs_core_src_exec__command_exec__command__params.rs11
-rw-r--r--misc/codex/files/patch-codex-rs_core_src_exec__command_responses__api.rs11
-rw-r--r--misc/codex/files/patch-codex-rs_core_src_exec__command_session__manager.rs11
-rw-r--r--misc/codex/files/patch-codex-rs_core_src_unified__exec_mod.rs38
-rw-r--r--misc/codex/files/patch-codex-rs_core_tests_suite_exec.rs11
-rw-r--r--misc/codex/files/patch-codex-rs_core_tests_suite_user__notification.rs11
-rw-r--r--misc/codex/files/patch-codex-rs_exec_tests_suite_mod.rs7
10 files changed, 4 insertions, 180 deletions
diff --git a/misc/codex/files/patch-codex-rs_cli_Cargo.toml b/misc/codex/files/patch-codex-rs_cli_Cargo.toml
deleted file mode 100644
index 628216c84f5f..000000000000
--- a/misc/codex/files/patch-codex-rs_cli_Cargo.toml
+++ /dev/null
@@ -1,12 +0,0 @@
---- codex-rs/cli/Cargo.toml.orig 2025-09-27 08:06:01 UTC
-+++ codex-rs/cli/Cargo.toml
-@@ -52,6 +52,9 @@ libc = { workspace = true }
- [target.'cfg(target_os = "macos")'.dependencies]
- libc = { workspace = true }
-
-+[target.'cfg(target_os = "freebsd")'.dependencies]
-+libc = { workspace = true }
-+
- [dev-dependencies]
- assert_cmd = { workspace = true }
- predicates = { workspace = true }
diff --git a/misc/codex/files/patch-codex-rs_cli_src_main.rs b/misc/codex/files/patch-codex-rs_cli_src_main.rs
deleted file mode 100644
index 577f39d19f85..000000000000
--- a/misc/codex/files/patch-codex-rs_cli_src_main.rs
+++ /dev/null
@@ -1,12 +0,0 @@
---- codex-rs/cli/src/main.rs.orig 2025-09-27 08:29:56 UTC
-+++ codex-rs/cli/src/main.rs
-@@ -219,6 +219,9 @@ fn pre_main_hardening() {
- #[cfg(target_os = "macos")]
- crate::pre_main_hardening::pre_main_hardening_macos();
-
-+ #[cfg(target_os = "freebsd")]
-+ crate::pre_main_hardening::pre_main_hardening_freebsd();
-+
- #[cfg(windows)]
- crate::pre_main_hardening::pre_main_hardening_windows();
- }
diff --git a/misc/codex/files/patch-codex-rs_cli_src_pre__main__hardening.rs b/misc/codex/files/patch-codex-rs_cli_src_pre__main__hardening.rs
deleted file mode 100644
index 7302568f4512..000000000000
--- a/misc/codex/files/patch-codex-rs_cli_src_pre__main__hardening.rs
+++ /dev/null
@@ -1,60 +0,0 @@
---- codex-rs/cli/src/pre_main_hardening.rs.orig 2025-09-26 18:28:59 UTC
-+++ codex-rs/cli/src/pre_main_hardening.rs
-@@ -4,9 +4,12 @@ const PTRACE_DENY_ATTACH_FAILED_EXIT_CODE: i32 = 6;
- #[cfg(target_os = "macos")]
- const PTRACE_DENY_ATTACH_FAILED_EXIT_CODE: i32 = 6;
-
--#[cfg(any(target_os = "linux", target_os = "android", target_os = "macos"))]
-+#[cfg(any(target_os = "linux", target_os = "android", target_os = "macos", target_os = "freebsd"))]
- const SET_RLIMIT_CORE_FAILED_EXIT_CODE: i32 = 7;
-
-+#[cfg(target_os = "freebsd")]
-+const PROCCTL_PROC_TRACE_CTL_FAILED_EXIT_CODE: i32 = 8;
-+
- #[cfg(any(target_os = "linux", target_os = "android"))]
- pub(crate) fn pre_main_hardening_linux() {
- // Disable ptrace attach / mark process non-dumpable.
-@@ -69,6 +72,43 @@ pub(crate) fn pre_main_hardening_macos() {
- .collect();
-
- for key in dyld_keys {
-+ unsafe {
-+ std::env::remove_var(key);
-+ }
-+ }
-+}
-+
-+#[cfg(target_os = "freebsd")]
-+pub(crate) fn pre_main_hardening_freebsd() {
-+ // Prevent debuggers from attaching to this process
-+ let mut arg = libc::PROC_TRACE_CTL_DISABLE_EXEC;
-+ let ret_code = unsafe {
-+ libc::procctl(libc::P_PID, 0, libc::PROC_TRACE_CTL, &mut arg as *mut _ as *mut libc::c_void)
-+ };
-+ if ret_code == -1 {
-+ eprintln!(
-+ "ERROR: procctl(PROC_TRACE_CTL) failed: {}",
-+ std::io::Error::last_os_error()
-+ );
-+ std::process::exit(PROCCTL_PROC_TRACE_CTL_FAILED_EXIT_CODE);
-+ }
-+
-+ // Set the core file size limit to 0 to prevent core dumps.
-+ set_core_file_size_limit_to_zero();
-+
-+ // Remove all LD_ environment variables, which can be used to subvert
-+ // library loading.
-+ let ld_keys: Vec<String> = std::env::vars()
-+ .filter_map(|(key, _)| {
-+ if key.starts_with("LD_") {
-+ Some(key)
-+ } else {
-+ None
-+ }
-+ })
-+ .collect();
-+
-+ for key in ld_keys {
- unsafe {
- std::env::remove_var(key);
- }
diff --git a/misc/codex/files/patch-codex-rs_core_src_exec__command_exec__command__params.rs b/misc/codex/files/patch-codex-rs_core_src_exec__command_exec__command__params.rs
deleted file mode 100644
index 60eb99d35251..000000000000
--- a/misc/codex/files/patch-codex-rs_core_src_exec__command_exec__command__params.rs
+++ /dev/null
@@ -1,11 +0,0 @@
---- codex-rs/core/src/exec_command/exec_command_params.rs.orig 2025-09-27 09:00:51 UTC
-+++ codex-rs/core/src/exec_command/exec_command_params.rs
-@@ -33,7 +33,7 @@ fn default_shell() -> String {
- }
-
- fn default_shell() -> String {
-- "/bin/bash".to_string()
-+ "/bin/sh".to_string()
- }
-
- #[derive(Debug, Deserialize, Serialize)]
diff --git a/misc/codex/files/patch-codex-rs_core_src_exec__command_responses__api.rs b/misc/codex/files/patch-codex-rs_core_src_exec__command_responses__api.rs
deleted file mode 100644
index b900e89ad10f..000000000000
--- a/misc/codex/files/patch-codex-rs_core_src_exec__command_responses__api.rs
+++ /dev/null
@@ -1,11 +0,0 @@
---- codex-rs/core/src/exec_command/responses_api.rs.orig 2025-09-27 09:01:29 UTC
-+++ codex-rs/core/src/exec_command/responses_api.rs
-@@ -29,7 +29,7 @@ pub fn create_exec_command_tool_for_responses_api() ->
- properties.insert(
- "shell".to_string(),
- JsonSchema::String {
-- description: Some("The shell to use. Defaults to \"/bin/bash\".".to_string()),
-+ description: Some("The shell to use. Defaults to \"/bin/sh\".".to_string()),
- },
- );
- properties.insert(
diff --git a/misc/codex/files/patch-codex-rs_core_src_exec__command_session__manager.rs b/misc/codex/files/patch-codex-rs_core_src_exec__command_session__manager.rs
deleted file mode 100644
index a5db5d4efccb..000000000000
--- a/misc/codex/files/patch-codex-rs_core_src_exec__command_session__manager.rs
+++ /dev/null
@@ -1,11 +0,0 @@
---- codex-rs/core/src/exec_command/session_manager.rs.orig 2025-09-27 09:02:31 UTC
-+++ codex-rs/core/src/exec_command/session_manager.rs
-@@ -376,7 +376,7 @@ PY"#
- cmd,
- yield_time_ms: 3_000,
- max_output_tokens: 1_000, // large enough to avoid truncation here
-- shell: "/bin/bash".to_string(),
-+ shell: "/bin/sh".to_string(),
- login: false,
- };
- let initial_output = match session_manager
diff --git a/misc/codex/files/patch-codex-rs_core_src_unified__exec_mod.rs b/misc/codex/files/patch-codex-rs_core_src_unified__exec_mod.rs
deleted file mode 100644
index 77088343e65d..000000000000
--- a/misc/codex/files/patch-codex-rs_core_src_unified__exec_mod.rs
+++ /dev/null
@@ -1,38 +0,0 @@
---- codex-rs/core/src/unified_exec/mod.rs.orig 2025-09-27 09:05:00 UTC
-+++ codex-rs/core/src/unified_exec/mod.rs
-@@ -434,7 +434,7 @@ mod tests {
- let open_shell = manager
- .handle_request(UnifiedExecRequest {
- session_id: None,
-- input_chunks: &["bash".to_string(), "-i".to_string()],
-+ input_chunks: &["sh".to_string(), "-i".to_string()],
- timeout_ms: Some(2_500),
- })
- .await?;
-@@ -473,7 +473,7 @@ mod tests {
- let shell_a = manager
- .handle_request(UnifiedExecRequest {
- session_id: None,
-- input_chunks: &["/bin/bash".to_string(), "-i".to_string()],
-+ input_chunks: &["/bin/sh".to_string(), "-i".to_string()],
- timeout_ms: Some(2_500),
- })
- .await?;
-@@ -521,7 +521,7 @@ mod tests {
- let open_shell = manager
- .handle_request(UnifiedExecRequest {
- session_id: None,
-- input_chunks: &["bash".to_string(), "-i".to_string()],
-+ input_chunks: &["sh".to_string(), "-i".to_string()],
- timeout_ms: Some(2_500),
- })
- .await?;
-@@ -616,7 +616,7 @@ mod tests {
- let open_shell = manager
- .handle_request(UnifiedExecRequest {
- session_id: None,
-- input_chunks: &["/bin/bash".to_string(), "-i".to_string()],
-+ input_chunks: &["/bin/sh".to_string(), "-i".to_string()],
- timeout_ms: Some(2_500),
- })
- .await?;
diff --git a/misc/codex/files/patch-codex-rs_core_tests_suite_exec.rs b/misc/codex/files/patch-codex-rs_core_tests_suite_exec.rs
deleted file mode 100644
index 3b232ec4c752..000000000000
--- a/misc/codex/files/patch-codex-rs_core_tests_suite_exec.rs
+++ /dev/null
@@ -1,11 +0,0 @@
---- codex-rs/core/tests/suite/exec.rs.orig 2025-09-27 09:06:53 UTC
-+++ codex-rs/core/tests/suite/exec.rs
-@@ -104,7 +104,7 @@ async fn exit_command_not_found_is_ok() {
- }
-
- let tmp = TempDir::new().expect("should be able to create temp dir");
-- let cmd = vec!["/bin/bash", "-c", "nonexistent_command_12345"];
-+ let cmd = vec!["/bin/sh", "-c", "nonexistent_command_12345"];
- run_test_cmd(tmp, cmd).await.unwrap();
- }
-
diff --git a/misc/codex/files/patch-codex-rs_core_tests_suite_user__notification.rs b/misc/codex/files/patch-codex-rs_core_tests_suite_user__notification.rs
deleted file mode 100644
index 85e58a77a1ae..000000000000
--- a/misc/codex/files/patch-codex-rs_core_tests_suite_user__notification.rs
+++ /dev/null
@@ -1,11 +0,0 @@
---- codex-rs/core/tests/suite/user_notification.rs.orig 2025-09-27 09:08:21 UTC
-+++ codex-rs/core/tests/suite/user_notification.rs
-@@ -35,7 +35,7 @@ async fn summarize_context_three_requests_and_instruct
- let notify_script = notify_dir.path().join("notify.sh");
- std::fs::write(
- &notify_script,
-- r#"#!/bin/bash
-+ r#"#!/bin/sh
- set -e
- echo -n "${@: -1}" > $(dirname "${0}")/notify.txt"#,
- )?;
diff --git a/misc/codex/files/patch-codex-rs_exec_tests_suite_mod.rs b/misc/codex/files/patch-codex-rs_exec_tests_suite_mod.rs
index 35dee0499c66..156e4a3c7ad8 100644
--- a/misc/codex/files/patch-codex-rs_exec_tests_suite_mod.rs
+++ b/misc/codex/files/patch-codex-rs_exec_tests_suite_mod.rs
@@ -1,8 +1,9 @@
---- codex-rs/exec/tests/suite/mod.rs.orig 2025-09-26 18:28:59 UTC
+--- codex-rs/exec/tests/suite/mod.rs.orig 2025-11-21 18:00:38 UTC
+++ codex-rs/exec/tests/suite/mod.rs
-@@ -2,4 +2,5 @@ mod resume;
- mod apply_patch;
+@@ -5,5 +5,6 @@ mod resume;
+ mod originator;
mod output_schema;
mod resume;
+#[cfg(not(target_os = "freebsd"))]
mod sandbox;
+ mod server_error_exit;