{"version":"2.1.299","anchor":"wsl-path-rules-also-matched-through-second-root-mount-gate","canonical_anchor":"wsl-path-rules-also-matched-through-second-root-mount-gate","heading":"On WSL, file permission rules can also match paths under the Windows drive mount","tier":"notice","area":"Permissions","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.299\/e\/wsl-path-rules-also-matched-through-second-root-mount-gate","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.299","markdown":"### On WSL, file permission rules can also match paths under the Windows drive mount\n\nOn WSL, deny, ask and edit permission rules can also be checked against the other mount spelling of a path, when a switch is on\n\n**What**\n\nWSL (Windows Subsystem for Linux) lets you run Linux on Windows, and the same file can often be reached by two different paths, for example through a `\/mnt` drive mount. Claude Code's file permission rules (settings that allow, deny or ask before Claude touches certain paths) used to match only the path exactly as written.\n\nOn WSL, Claude Code can now also check the rules against the second mount spelling of the path. This covers:\n\n- deny rules\n\n- ask rules\n\n- edit checks\n\nThis is behind a remotely controlled switch that is off unless it is switched on remotely.\n\n**Why**\n\nWithout this, a file you had blocked could be reached through its other path on WSL, getting around a deny rule.\n\n- Flag `tengu_zesty_pearl`: Not enough to say (read for one account on one subscription tier against v2.1.299; this account: no value returned, anonymous baseline: no value returned, compiled default: off) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 3\/5\n- Scope: individual\n- Heads-up: no"}