What
Significantly improved Unix domain socket security with ownership verification and stale socket cleanup.
Details
- Socket directory ownership check: warns if directory owned by different user
- Stale socket cleanup: removes sockets for non-running PIDs
- Better seccomp filter path discovery for global
@anthropic-ai/sandbox-runtimeinstallations - Added
.npm-globalto seccomp binary search paths - Improved error messages with actionable installation instructions
- Warning when seccomp binaries unavailable: "[Sandbox Linux] Seccomp binaries not available - unix socket blocking disabled. Install @anthropic-ai/sandbox-runtime globally for full protection."
Evidence
Socket ownership check at line 523583 ("Socket directory not owned by current user"), stale socket cleanup messages, seccomp search paths at line 95936 (".npm-global"), warning at line 96398
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agree
Improved /sandbox command UI to show dependency status with installation instructions when dependencies are missing