{"version":"2.1.40","anchor":"linux-sandbox-improvements","canonical_anchor":"linux-sandbox-improvements","heading":"Linux Sandbox Improvements","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.40\/e\/linux-sandbox-improvements","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.40","markdown":"### Linux Sandbox Improvements\n\n- Glob patterns are now expanded for deny paths on Linux\n- Better handling of symlink-based deny path attacks (mounts `\/dev\/null`)\n- Cleanup of bwrap mount points after sandbox teardown\n- More nuanced logging for skipped deny paths\n\n**Evidence**\n\nLinux sandbox improvements (search for `\"Cleaned up bwrap mount point\"`, `\"Expanded glob pattern\"`, `\"Mounted \/dev\/null\"`)"}