{"version":"2.1.98","anchor":"subprocess-environment-scrubbing-enhancements","canonical_anchor":"subprocess-environment-scrubbing-enhancements","heading":"Subprocess Environment Scrubbing Enhancements","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.98\/e\/subprocess-environment-scrubbing-enhancements","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.98","markdown":"### Subprocess Environment Scrubbing Enhancements\n\nThe `CLAUDE_CODE_SUBPROCESS_ENV_SCRUB` feature (introduced previously) receives significant hardening in this release:\n\n- Requires `bubblewrap` (bwrap) on Linux for filesystem sandboxing; provides clear installation instructions if missing\n- Creates stub files for common dotfiles (.gitconfig, .bashrc, .npmrc, etc.) to prevent errors in sandboxed environments\n- Defines comprehensive filesystem access rules: deny-read for container sockets, deny-write for shell configs, git hooks, CI environment files, and package manager configs\n- Adds `.git\/info\/exclude` entries for scrub-mode stubs to keep git status clean\n- Forces permission mode to default when env scrubbing is active\n- New `allowUnsandboxedCommands` sandbox setting for fine-grained control\n\n**Evidence**\n\nEnv scrub hardening (search for `\"bubblewrap is required for subprocess env scrubbing\"` and `\"claude-code scrub-mode stubs\"`)"}