Hacker Newsnew | past | comments | ask | show | jobs | submitlogin



> The sandboxed bash tool uses OS-level primitives to enforce both filesystem and network isolation.

As I can't trust Claude Code to use a correct shell, I don't know why I would trust this feature.


Note that there are reports that it can disable sandbox, so personally I wouldn't trust this.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: