fix: create explicit CODEX_HOME with secure permissions (#1380)

This commit is contained in:
Kai (Tam Nhu) Tran
2026-05-23 21:45:12 -04:00
committed by GitHub
parent 90d5ca2cbb
commit 55cd78bce4
2 changed files with 4 additions and 2 deletions
+1 -1
View File
@@ -222,7 +222,7 @@ function prepareExplicitCodexHome(
}
try {
fs.mkdirSync(codexHome, { recursive: true });
fs.mkdirSync(codexHome, { mode: 0o700, recursive: true });
} catch (err) {
const error = err as NodeJS.ErrnoException;
if (error.code !== 'EEXIST') {
@@ -596,7 +596,9 @@ process.exit(0);
expect(result.status).toBe(0);
expect(fs.existsSync(freshCodexHome)).toBe(true);
expect(fs.statSync(freshCodexHome).isDirectory()).toBe(true);
const codexHomeStat = fs.statSync(freshCodexHome);
expect(codexHomeStat.isDirectory()).toBe(true);
expect(codexHomeStat.mode & 0o777).toBe(0o700);
expect(readLoggedCodexCalls(codexArgsLogPath)).toEqual([
['-c', 'model="gpt-5"', '--version'],
['-c', 'model_reasoning_effort="high"', 'fix failing tests'],