Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SandboxArea: what it touches
Internal ChangesKind: in v2.1.227,
Internal ChangesSection of the release
What
The check for running as root outside a deliberate sandbox, along with the related container and environment-gate checks, now lives in a single class with its inputs injected rather than read directly. The platform value passed in is the literal "linux", so the class's non-Windows guard is always satisfied here.
Evidence
isRootOutsideDeliberateSandbox
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
