You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.224,
What probably matters to youSection of the release
What
Records of blocked syscalls in the Linux sandbox now carry the actual command text rather than an opaque internal id, using the same lookup macOS already used. This also means ignoreViolations patterns match against the command you wrote.
Evidence
resolveCommandText
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
