{"version":"1.0.114","anchor":"filesystem-sandboxing-for-macos","canonical_anchor":"filesystem-sandboxing-for-macos","heading":"Filesystem Sandboxing for macOS","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/1.0.114\/e\/filesystem-sandboxing-for-macos","release_url":"https:\/\/changelogs.core-directive.com\/v\/1.0.114","markdown":"### Filesystem Sandboxing for macOS\n\n**What:** Fine-grained filesystem access controls using macOS sandbox-exec, allowing you to restrict which files and directories bash commands can read or write.\n\n**How to use:** Configure in `.claude\/settings.json`:\n\n`{ \"sandbox\": { \"filesystem\": { \"read\": { \"allow\": [\"~\/projects\/*\", \"~\/data\"], \"deny\": [\"\/etc\/passwd\"] }, \"write\": { \"allow\": [\"~\/projects\/output\/*\"], \"deny\": [\"~\/projects\/output\/protected\"] } } } }` **Details:**\n\n- Complements existing network sandboxing (v1.0.113 only had network restrictions)\n- Read allow-list mode denies all reads except specified paths\n- Write deny-list blocks specific paths while allowing essential system paths\n- Automatically allows stdout\/stderr, temp directories, and Claude config paths\n- Supports path expansion (`~`, `.\/`, `..\/`) and wildcards (`\/*` suffix only)\n- Path validation prevents shell metacharacters (`&&`, `||`, `;`, backticks, `$`)\n- **Evidence**: `QBB() at line 374281`, `y41() at line 353864`"}