Codex 沙盒该怎么清理干净

LukeWang · June 5, 2026, 3:15am

最近从 Codex 转用 Pi Coding Agent，于是想把原本的 Codex 给卸载掉。但是沙盒相关的功能在系统里拉屎实在不知道该怎么安全的清理…

Codex 拉的屎包括但不限于创建沙盒用户和组，修改 Codex 打开过的文件夹安全权限…

Codex 拉的

新增的用户：

Codex 修改过的权限：

正常文件夹的权限：

看了 GitHub 上有关的 issue，改的还不止项目文件夹，甚至还会修改 AppData 的权限…不知道还有没有其他隐藏的坑。

Windows 的权限管理搞不明白，有没有佬指点一下该怎么安全的清理这一坨东西

github.com/openai/codex

No way to do a clean uninstall of Codex CLI on Windows that reverts system sandbox changes

已打开 07:41PM - 20 Mar 26 UTC

zusorio

bug windows-os sandbox CLI

### What version of Codex CLI is running? codex-cli 0.116.0 ### What subscript…ion do you have? Pro ### Which model were you using? _No response_ ### What platform is your computer? Microsoft Windows NT 10.0.26200.0 x64 ### What terminal emulator and version are you using (if applicable)? _No response_ ### What issue are you seeing? I ran into #12226. I'd like to revert the changes the Codex CLI made to my system during install and cleanly uninstall it. There isn't a way to do this. It seems crazy that the install process makes deep enough changes to my system to break something as core as SSH, and then there's no way to remove it. ### What steps can reproduce the bug? Install Codex CLI with Sandbox on Windows. ### What is the expected behavior? _No response_ ### Additional information _No response_

github.com/openai/codex

Codex sandbox installation corrupts ACL on AppData

已打开 03:19PM - 25 Mar 26 UTC

thunderstatic

bug windows-os sandbox

### What version of the Codex App are you using (From “About Codex” dialog)? 26….313.5234 ### What subscription do you have? Free ### What platform is your computer? Microsoft Windows NT 10.0.19045.0 x64 ### What issue are you seeing? #### Description After installing Codex on Windows 10 and subsequently enabling/installing its sandbox component, Opera, Opera GX, and Opera Developer fail to launch entirely. The browsers flash a black screen 2–3 times and silently close. The issue appears specifically after the sandbox setup step, not immediately after the initial Codex installation. Chrome (stable) and Brave are unaffected. #### Root Cause Codex creates a local Windows group `CodexSandboxUsers` and local users `CodexSandboxOffline` / `CodexSandboxOnline` during installation, and modifies ACL permissions on `AppData\Local`. This breaks the Chromium sandbox for any browser installed under `AppData\Local` (Opera, Opera GX, Chrome Canary), because the GPU process requires the `ALL APPLICATION PACKAGES (S-1-15-2-1)` permission on that path to launch in sandboxed mode. Browsers installed in `Program Files` (Chrome stable, Brave, Edge) are unaffected because their `AppData\Local` path is not involved in the same way. ### What steps can reproduce the bug? 1. Install Codex on Windows 10 2. Go through the sandbox setup/activation step within Codex 3. Launch Opera, Opera GX, or Opera Developer → browser closes immediately ### What is the expected behavior? The sandbox installation step should not modify ACL permissions on `AppData\Local` in a way that affects other applications, or should at minimum restore them on uninstall/rollback.

github.com/openai/codex

Windows sandbox hardening

已打开 07:14PM - 21 May 26 UTC

oxsignal

enhancement windows-os sandbox CLI app

### What variant of Codex are you using? CLI and Desktop ### What feature woul…d you like to see? One more hardening suggestion for the Windows sandbox: When the workspace/write root is `%USERPROFILE%`, Codex expands it into top-level user-profile children. This can include sensitive locations such as OneDrive, AppData, Documents, Downloads, Desktop, and similar profile directories. Even if recent patches prevent stale capability SIDs from being reused across unrelated workspaces, the filesystem ACL setup can still leave Codex-related ACEs on these profile child directories. In my environment I had to manually clean up stale CodexSandboxUsers / capability SID ACEs from several user-profile paths. I think `%USERPROFILE%` should either be rejected as a workspace write root, or sensitive profile children should be excluded by default. At minimum, locations such as the following should not receive broad writable ACLs: - `%APPDATA%` - `%LOCALAPPDATA%` - `%USERPROFILE%\OneDrive` - `%USERPROFILE%\Documents` - `%USERPROFILE%\Desktop` - `%USERPROFILE%\Downloads` - `%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup` Developer-tool caches that normally live under AppData should be redirected to a Codex-controlled cache/temp directory instead of granting broad AppData write access. I also recommend adding an uninstall/cleanup path for Windows sandbox state. If Codex is uninstalled or the Windows sandbox is reset, it should remove the local Codex sandbox users/groups and clean up Codex-created ACEs from the user profile. Otherwise, stale CodexSandboxUsers / capability SID ACL entries can remain on disk indefinitely after the product is removed. ### Additional information _No response_

ttteric · June 5, 2026, 3:17am

佬可以大概讲一下，为啥要从codex转到pi吗，这几天正好在尝试，但是暂时没发现优势

vvanglro · June 5, 2026, 3:19am

mac下拉的在哪里

.codex目录还好没很大

LukeWang · June 5, 2026, 3:33am

足够轻量，没有乱七八糟不需要的东西，想要啥可以自己装或者叫AI写。已经有其他佬友发过帖子，可以搜索了解。

yuelove123 · June 5, 2026, 4:26am

佬没有说自己的系统，codex的沙盒在Windows上用的是Windows sandbox，所以如果使用windows的话，完全不用担心清理沙盒的问题，因为windows sandbox可以随时摧毁，随时创建

LukeWang · June 5, 2026, 6:21am

我指的并非沙盒本身，而是Codex对系统做的修改并不会随着Codex的卸载而还原。尤其是issue中表明Codex修改了AppData的权限后可能导致其他软件的不正常表现。

Ludri · June 21, 2026, 9:51am

codex sandbox会改 users \你的用户名\ 下所有文件的权限，会添加两个windows用户(在一个组里)，因为添加了用户，所以users文件夹里会多出一个带codex的隐藏文件夹，还会改防火墙规则，我是把这几个全删了之后就没管了，也不知道他有没有改其他系统设置

Topic		Replies	Views
终于找到codex cli巨慢+巨卡的原因了！开发调优 ChatGPT , OpenAI , 人工智能 , Codex	17	1489	July 19, 2026
Codex的windows沙箱机制下找不到WinGet安装的工具搞七捻三 ChatGPT , OpenAI , 人工智能 , 软件开发	13	214	August 23, 2026
Codex在6/23更新后出现的Windows沙箱权限问题解决方案开发调优 ChatGPT , OpenAI , 软件开发	8	620	June 23, 2026
CLOSEAI的codex左右脑互博设定之win上的approval_policy和sandbox_mode 开发调优 OpenAI , 人工智能	5	948	September 20, 2025
codex沙箱问题开发调优人工智能 , 快问快答	19	724	June 6, 2026

Codex 沙盒该怎么清理干净

Related topics