{"version":"2.1.323","anchor":"sandbox-denies-sysctl-read-of-kernprocargs-on-macos","canonical_anchor":"sandbox-denies-sysctl-read-of-kernprocargs-on-macos","heading":"macOS sandbox blocks reading other programs' command lines","tier":"notice","area":"Sandbox","scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323\/e\/sandbox-denies-sysctl-read-of-kernprocargs-on-macos","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323","markdown":"### macOS sandbox blocks reading other programs' command lines\n\nOn macOS, sandboxed commands can no longer read the arguments other running programs were started with\n\n**What**\n\nThe sandbox is a set of limits Claude Code places on the commands it runs, so they can only reach what they are allowed to. On macOS, the sandbox now denies one system query that returns the arguments other running programs were started with. Before, that query was not blocked.\n\n**Why**\n\nProgram arguments can hold private things such as file paths, tokens or passwords. A command running in the sandbox can no longer read them from other programs on your Mac.\n\n- Area: Sandbox\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5\n- Scope: individual\n- Heads-up: yes"}