中文

Claude Code: Added sandbox.allowNestedUserNamespaces for sandboxed Linux commands

Added sandbox.allowNestedUserNamespaces so sandboxed commands on Linux can create user namespaces; this lets them get around the sandbox's file protections.

Claude Code
Event type
Feature
Version
2.1.305
Published by vendor
Compiled here

What changed

5 points

  1. Added sandbox.allowNestedUserNamespaces so sandboxed commands on Linux can create user namespaces (Chromium, rootless podman), but this lets them get around the sandbox's file protections.

    Official wording · c1

    Added sandbox.allowNestedUserNamespaces so sandboxed commands on Linux can create user namespaces (Chromium, rootless podman); this lets them get around the sandbox's file protections

    Official wording · c1
  2. Added CLAUDE_CODE_RETRY_WATCHDOG_USAGE_LIMIT_RECHECK_MS so unattended retry mode notices a usage limit that was lifted before its reset.

    Official wording · c2

    Added CLAUDE_CODE_RETRY_WATCHDOG_USAGE_LIMIT_RECHECK_MS so unattended retry mode ( CLAUDE_CODE_RETRY_WATCHDOG ) notices a usage limit that was lifted before its reset

    Official wording · c2
  3. Fixed every request failing on Vertex, Bedrock and other providers when the endpoint or a gateway rejects tool search.

    Official wording · c3

    Fixed every request failing on Vertex, Bedrock and other providers when the endpoint or a gateway rejects tool search

    Official wording · c3
  4. Fixed Bash commands on a full disk failing with a raw ENOSPC file path; the error now says the disk is full and that nothing ran.

    Official wording · c4

    Fixed Bash commands on a full disk failing with a raw ENOSPC file path: the error now says the disk is full and that nothing ran

    Official wording · c4
  5. The /artifacts delete confirmation now takes 1 or Enter to keep, 2 to delete, and Esc to cancel; y and n no longer answer it.

    Official wording · c5

    Changed the /artifacts delete confirmation to take 1 or Enter to keep, 2 to delete, and Esc to cancel; y and n no longer answer it

    Official wording · c5

Change details

Fields in this table are taken verbatim from the official text.

IDSubjectActionObjectScope
c1Claude Codeaddedsandbox.allowNestedUserNamespaces so sandboxed commands can create user namespacesLinux sandboxed commands (Chromium, rootless podman); lets them get around the sandbox's file protections
c2Claude CodeaddedCLAUDE_CODE_RETRY_WATCHDOG_USAGE_LIMIT_RECHECK_MS so unattended retry mode notices a usage limit lifted before its resetunattended retry mode
c3Claude Codefixedevery request failing when the endpoint or a gateway rejects tool searchVertex, Bedrock and other providers
c4Claude CodefixedBash commands on a full disk failing with a raw ENOSPC file path; the error now says the disk is full and that nothing ranfull disk
c5Claude Codechangedthe /artifacts delete confirmation to take 1 or Enter to keep, 2 to delete, and Esc to cancel; y and n no longer answer it/artifacts delete confirmation

Version timeline

Published updates for this tool on this site, newest official date first.

  1. CurrentAdded sandbox.allowNestedUserNamespaces for sandboxed Linux commands
  2. Cache write token fields added to OpenTelemetry api_request event

About this tool

Claude Code

Claude Code is Anthropic's coding agent for reading codebase context, editing files, running commands and assisting development work.

CategoriesAI Coding

View Claude Code details

Related guides

Source and notes

Official source · github.com/anthropics/claude-code/releases/tag/v2.1.305

About this AI summary

This entry was compiled by AI from official sources and automatically checked. Found a mistake? Please send feedback.