You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
SandboxArea: what it touches
Bug FixesKind: in v2.1.223,
Bug FixesSection of the release
What
The bubblewrap argument builder now recognises when a non-existent deny path already sits inside a read-only denied directory and stops adding a mount to block it.
Details
new bookkeeping tracks write roots and their realpaths, deny directories and their realpaths, and a map of deny paths per allowed root
in the redundant case it no longer mounts /dev/null or an empty temp dir to prevent creation, and logs that the path is already uncreatable