Configure the sandboxed Bash tool changedsandboxing
Nearest release: v2.1.306, published an hour after upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 21 Oct 2026 00:36 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 21 Oct 2026 00:37 UTC.
Upstream edited
Recorded here
Lines+4added
Lines−0removed
From line
542
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits50to this page, all time
#### Denied paths that pass through a symlink
The whole hunk
from line 542, old and new numbered
/
from line 542
542542
543543If `git merge` or `git checkout` fails with `unable to unlink old` on one of these paths, see [A git command fails with `unable to unlink old`](#a-git-command-fails-with-unable-to-unlink-old).
544544
545#### Denied paths that pass through a symlink
546
547On macOS, when a denied path passes through a symlink, such as a `~/.claude` that is a link into a dotfiles repository, the sandbox also denies the path's real location. This covers the sandbox's own denials and your literal `denyWrite` and `denyRead` entries.
548
545549### Network isolation
546550
547551A sandboxed command has no direct route to the network:
No line in this hunk matches that.