A second Linux process group for Bash tools exists with helpers that nothing calls.
A claude-code-keeper process group sits beside the existing Bash group with no callers outside its own code.
What's wrong with this entry?
On Linux and WSL, alongside the existing claude-code-bash process group used to contain tool processes, there is now a sibling claude-code-keeper group with helpers to create it, move a process into it and offer it when spawning. Nothing outside the process-group code itself calls any of them.
- Moving a process logs a line of the form
tool cgroup: keeper pid <pid> moved to <path>. - There is no flag or setting involved; the functions are simply uncalled, and the name appears nowhere else in the build.
claude-code-keeper
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.236
macOS sandbox re-applies read and delete denials inside writable folders
Both mention sandbox
-
v2.1.236
Sandbox proxy no longer writes to sockets that have gone away
Both mention sandbox
-
v2.1.236
IPv6 hosts through the proxy
Both mention sandbox