Sandbox fails on symlinked paths

“The Bash call fails with the bwrap error above instead of printing ok.”

Is this your bug? What gets counted gets fixed. Pile on.

Paste this into your agent. It files your report, with your error and version.

I hit this bug: rapsheet.dev/sheets/claude-code/issues/20642/file
Follow it to file my report. Show me the text before you send.

No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends

Sandboxed Bash commands fail when read-deny path crosses symlink. On Linux, sandbox setup aborts before the command runs because bwrap cannot create the mask or placeholder target for a path through a symlinked directory.

Is this your bug?

File my report

Where: Linux sandbox
Versions: 2.1.317
Platforms: Linux
How bad: Breaks a normal workflow.

Related: Linux sandbox fails every command

Not quite your bug?

Sandbox bwrap cannot exec bash10 people
Sandbox read-only bind breaks Bash3 people
Sandbox placeholder files in .git2 people

Original reports2, newest first

Nov 3, 2026Linux sandbox: blockReadsOutsideWorkingDirectories + a symlinked additionalDirectories path (/home → /var/home) breaks every sandboxed Bash command#107034
Oct 23, 2026Linux sandbox: read-deny path through a symlinked directory fails bwrap for every Bash command#104685