{"version":"2.1.321","anchor":"sandboxed-bash-permission-checks-run-inside-a-wrapper","canonical_anchor":"sandboxed-bash-permission-checks-run-inside-a-wrapper","heading":"Bash permission checks run differently when sandboxing is on","tier":"internal","area":"Sandbox","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/sandboxed-bash-permission-checks-run-inside-a-wrapper","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321","markdown":"### Bash permission checks run differently when sandboxing is on\n\nWith sandboxing on, Claude Code now runs its Bash permission checks inside an extra layer instead of directly\n\n**Unclear.** It is not clear what the extra layer does or whether it changes which commands are allowed.\n\n**What**\n\nBefore running a shell command, Claude Code checks whether it may run it. The sandbox is an isolated area that limits what commands can touch. When the sandbox is on and the command is not excluded from it, that check now runs inside an extra layer instead of directly. A new helper that decides whether to allow the command runs inside the same layer.\n\n**Why**\n\nThis may change how the permission check and the sandbox work together.\n\n- Area: Sandbox\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5\n- Scope: individual\n- Heads-up: no"}