Claude Code v2.1.50 ·
macOS Sandbox Unix Socket Permissions
EntryKind: in v2.1.50,
ChangesSection of the release
What
More granular Unix socket permissions in the macOS sandbox.
Details
- Changed from broad
network* permission to specific network-bind and network-outbound for Unix sockets - Adds
AF_UNIX socket domain permission explicitly - Improves security by limiting socket access to specific paths
Evidence
Sandbox socket rules (search for "(allow system-socket (socket-domain AF_UNIX))")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
See this entry in the whole of v2.1.50 →
