Claude Code v2.1.223 ·
Linux bubblewrap sandbox resolves symlinks and expands deny-only roots
On Linux, sandboxed writes land in the right place instead of being wrongly diverted into a temporary overlay.
You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
SandboxArea: what it touches
Bug FixesKind: in v2.1.223,
What probably matters to youSection of the release
What
The bubblewrap argument builder tracks bound paths more accurately, so writes are not wrongly redirected into a temporary overlay.
Details
- the realpath of each bound directory is also pushed when it differs from the given path
- a deny-only root is expanded into its top-level children, skipping
proc, dev and sys - the ssh config drop-in directory is included when present
- these sets decide whether a would-be write path is already covered before a temporary overlay is created
- Linux only
Evidence
/etc/ssh/ssh_config.d
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
See this entry in the whole of v2.1.223 →
