{"version":"2.1.133","anchor":"admin-controlled-sandbox-binary-paths","canonical_anchor":"admin-controlled-sandbox-binary-paths","heading":"Admin-Controlled Sandbox Binary Paths","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.133\/e\/admin-controlled-sandbox-binary-paths","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.133","markdown":"### Admin-Controlled Sandbox Binary Paths\n\nManaged settings can now provide absolute paths for Linux\/WSL sandbox helper binaries.\n\n**Usage**\n\n`{ \"sandbox\": { \"bwrapPath\": \"\/usr\/bin\/bwrap\", \"socatPath\": \"\/usr\/bin\/socat\" } }` **Details** - `sandbox.bwrapPath` overrides bubblewrap auto-detection. - `sandbox.socatPath` controls the sandbox network proxy helper. - These paths are only honored from admin-controlled managed settings. - Error messages now distinguish \u201cbubblewrap missing\u201d from \u201cconfigured bwrap path is not executable\u201d. **Evidence** Managed sandbox path descriptions and validation errors (search for `\"Linux\/WSL only: Absolute path to the bwrap\"` and `\"sandbox.bwrapPath is set to\"`)."}