You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.323,
ImprovementsSection of the release
Unclear It is unclear whether processes inside the same sandbox can still be inspected, because the new deny rule comes before the old allow rule.
What
On macOS, Claude Code can run commands inside a sandbox, a fenced-off space that limits what the command can reach. The sandbox rules changed in two ways:
A new rule denies access to process information by default, and shows a message when it does.
A new rule allows listing process IDs, where macOS supports that permission.
The rule allowing information about processes inside the same sandbox is still there.
Why
Tools that inspect running processes, such as ps, may behave differently or fail inside the sandbox.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is unclear whether processes inside the same sandbox can still be inspected, because the new deny rule comes before the old allow rule.
