5 pages for filesystem.denyread.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
Claude Code changelog
Claude Code CLI · in the page
changelog
…* Fixed sandboxed commands failing to start on Linux when a `sandbox.filesystem.denyRead` glob contains brackets that are not a character class, such as a `[user-id]` route folder * Fixed `rm -r` of…
Deploy managed settings
Claude Code CLI · in the page
managed-settings
…anaged allowlist grants nothing until you fix the deny list. * While `filesystem.denyRead`, `filesystem.denyWrite`, or any entry in either is invalid, Claude Code also withholds both `filesystem.allow…
Configure the sandboxed Bash tool
Claude Code CLI · in the page
sandboxing
…luding credential files such as `~/.ssh` and `~/.aws/credentials` | [`filesystem.denyRead`](https://code.claude.com/docs/en/settings-reference#sandbox-filesystem-denyread), [`credentials`](#protect-cr…
Claude Code settings
Claude Code CLI · in the page
settings
…usr/local/bin"]` | | `filesystem.denyRead` | Paths where sandboxed commands cannot read. Arrays are merged across all settings scopes…
All settings
Claude Code CLI · in the page
settings-reference
…md) commands can write to | Sandbox settings | Any file | | [`sandbox.filesystem.denyRead`](#sandbox-filesystem-denyread) | Block [sandboxed](https://code.claude.com/docs/en/sandboxing.md) commands fr…