{"version":"2.1.307","anchor":"bash-permission-check-dd-now-gets-its-own-env-assignment-al","canonical_anchor":"bash-permission-check-dd-now-gets-its-own-env-assignment-al","heading":"Shell command checks treat assignment-style arguments to dd separately","tier":"notice","area":"Permissions","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.307\/e\/bash-permission-check-dd-now-gets-its-own-env-assignment-al","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.307","markdown":"### Shell command checks treat assignment-style arguments to `dd` separately\n\nWhen checking a shell command before running it, Claude Code now handles assignment-style arguments to `dd` under a separate rule\n\n**Unclear.** Which commands besides `dd` are covered, and whether the new path check makes prompts more or less frequent, is not settled.\n\n**What**\n\nBefore Claude runs a shell command, Claude Code checks whether the command can run without asking you first, or outside the sandbox. The sandbox is a restricted environment that limits what a command can touch. Part of that check looks at arguments written like a variable assignment, in the form `NAME=value`.\n\nOne server flag, `tengu_quiet_larkspur`, used to decide from which argument onward such arguments were tolerated. Now:\n\n- `dd` has its own rule, controlled by a separate flag, `tengu_plain_sorrel`\n\n- the existing set of commands still follows `tengu_quiet_larkspur`\n\n- some assignments are let through only when every part of their value, split at colons, passes a check that it is a path\n\nBoth flags fall back to on when the server sends nothing. Before this release, the flag server returned on for both of them for this site's account and for an anonymous one.\n\n**Why**\n\nThis changes which shell commands Claude Code asks you about before running, or runs outside the sandbox. If you see more or fewer prompts for commands like `dd`, this is where they come from.\n\n- Flag `tengu_plain_sorrel`: On for this account, and not off by default (read for one account on one subscription tier against v2.1.307; this account: on, anonymous baseline: on, compiled default: on) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Flag `tengu_quiet_larkspur`: On for this account, and not off by default (read for one account on one subscription tier against v2.1.307; this account: on, anonymous baseline: on, compiled default: on) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Flag `tengu_umber_plover`: Not enough to say (read for one account on one subscription tier against v2.1.307; this account: no value returned, anonymous baseline: no value returned, compiled default: on) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 2\/5\n- Scope: individual\n- Heads-up: no"}