Source Intelligence
Follow Discord
Reading a new release v2.1.251 Analysing changes · 2/5 Sorting the findings · 1/4 steps 470 findings $18.91 so far

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v1.0.122 Home All releases ←olderv1.0.120 v1.0.123newer→
Claude Code v1.0.122

Enhanced Sandbox Security (macOS)

What changed: macOS sandbox policies rewritten based on Chrome's security model, replacing broad wildcards with explicit whitelists

How it works now:

  • Process permissions: Only allows process-exec, process-fork, and same-sandbox operations (previously allowed all process operations)
  • Mach IPC: Restricts to 9 specific Apple system services instead of allowing all Mach operations
  • IOKit access: Limited to specific device classes (IOSurfaceRootUserClient, RootDomainUserClient) instead of all IOKit operations
  • Sysctls: Whitelists ~45 specific hardware/kernel information sysctls instead of allowing all reads
  • File I/O: Specific device files only (/dev/null, /dev/random, etc.)

Details:

  • Follows principle of least privilege
  • Based on Chromium's battle-tested sandbox implementation
  • Breaking change: Commands relying on unrestricted system access may fail
  • Unix socket configuration changed: allowUnixSockets now only accepts array of paths (boolean values removed)
  • Evidence: kc4() at line 370411 (new profile generator replacing eb6() at line 374940 in v1.0.120)

See this entry in the whole of v1.0.122 →