New codex agent loves "sudo rm -rf"

[matssk]

The new codex agent in 0.36 loves using "sudo rm -rf" all the time. It deleted old logs, cleans out old builds etc. So far it hasn't done anything wrong. It has only cleaned out old junk etc, but the fact that it tends to run "sudo rm -rf" multiple times in a session just makes me a bit nervous. I do run everything in a container though with regular git commits and frequent backups of the container and file system in general, so even if it were to delete everything, it would just be an annoyance.

I've disabled the sandbox, since the sandbox pretty much made it unusable, it generally refused to run tests and mostly refused to run commands. Not sure if this has improved with the new codex agent.

What's your experiences and what settings are you running at?

Also how are people using approval settings? I do try to switch it on and off using "/approvals" as needed, but often I just write "Do not make any changes or write any code".

[nekopanlab]

Noticed the same and it surely felt scary, it accidentally deleted something it shouldn't (scheme files in xcode) luckily not hard to recover