From 3037dbc2ddfe893bba5a654175aef28fd09ac738 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Mon, 17 Aug 2026 16:48:13 +0000
Subject: [PATCH] Allow staged applications to execute from tmpfs

Co-authored-by: codegirl007 <codegirl-007@users.noreply.github.com>
---
 agentbox/internal/environment/dockerx11/docker.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/agentbox/internal/environment/dockerx11/docker.go b/agentbox/internal/environment/dockerx11/docker.go
index 86fd713..3272c48 100644
--- a/agentbox/internal/environment/dockerx11/docker.go
+++ b/agentbox/internal/environment/dockerx11/docker.go
@@ -57,7 +57,7 @@ func (e *Environment) Start(ctx context.Context) error {
 		"--init",
 		"--network=none",
 		"--read-only",
-		"--tmpfs=/tmp:rw,nosuid,nodev,size=128m",
+		"--tmpfs=/tmp:rw,exec,nosuid,nodev,size=128m",
 		"--cap-drop=ALL",
 		"--security-opt=no-new-privileges",
 		"--pids-limit=128",