Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial
Home / Reference / Settings keys

sandbox.allowNestedUserNamespaces

setting never mined documented JSON

A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.

Let sandboxed commands create user namespaces on Linux and WSL2

Anthropic's own wording. Read off All settings, captured 2026-10-22.

First seen — never in a mined build
Last seen — never in a mined build
Builds0 / 149on this box, as of v2.1.308
Written about v2.1.304 first named in a changelog, 19 Oct 2026

In the changelogs

4

Releases whose published page names sandbox.allowNestedUserNamespaces.

  1. v2.1.305
    Device-tool refusal now names the nested user namespaces sandbox setting

    The message about device tools being withheld now lists sandbox.allowNestedUserNamespaces among the settings that weaken isolation

    found in this entry's text, named in this entry

  2. v2.1.305
    Nested user namespace sandbox setting now covers WSL and more tools

    sandbox.allowNestedUserNamespaces now also applies on WSL, names more tools that need it, and stays off by default

    found in this entry's text, named in this entry

  3. v2.1.305
    Turning on nested user namespaces in the sandbox is now a reason to refuse

    Claude Code now refuses an action when sandbox.allowNestedUserNamespaces is on, because it lets commands get around file deny rules

    found in this entry's text, named in this entry

  4. v2.1.304
    New sandbox setting lets sandboxed commands create their own user namespaces

    A new allowNestedUserNamespaces sandbox setting, off by default and Linux only, lets browsers or rootless podman work inside the sandbox at a security cost

    named in this entry, found in this entry's text

First cited

2

The earliest release whose published evidence quoted sandbox.allowNestedUserNamespaces was v2.1.305, 20 Oct 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.

ReleaseDateThe span that was quoted
v2.1.30520 Oct 2026sandbox.allowNestedUserNamespaces
v2.1.30520 Oct 2026sandbox.allowNestedUserNamespaces lets sandboxed commands get around file deny rules

Presence across releases

0

The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.

Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.

Feedback