Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.223 Home All releases ←olderv2.1.222 v2.1.224newer→
Claude Code v2.1.223

Linux bubblewrap sandbox resolves symlinks and expands deny-only roots

You'll notice
Useful4 Signal0
Sandbox

On Linux, sandboxed writes land in the right place instead of being wrongly diverted into a temporary overlay.

What

The bubblewrap argument builder tracks bound paths more accurately, so writes are not wrongly redirected into a temporary overlay.

Details
  • the realpath of each bound directory is also pushed when it differs from the given path
  • a deny-only root is expanded into its top-level children, skipping proc, dev and sys
  • the ssh config drop-in directory is included when present
  • these sets decide whether a would-be write path is already covered before a temporary overlay is created
  • Linux only
Evidence

/etc/ssh/ssh_config.d

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.223 →