[BUG] Linux: sandbox denyRead glob (~/**/.env) now freezes the TUI on every Bash command (regression)

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

On Linux, with sandbox denyRead rules like ~/**/.env, every sandboxed Bash command freezes the TUI for a minute or more. This config worked fine for months and recently started freezing. Possibly related to the 2.1.290 fix for the same freeze at startup.

Claude Code 2.1.296, Ubuntu 26.04, bubblewrap 0.11.1. Home has symlinks into a large NTFS drive.

"denyRead": ["~/**/.env", "~/**/.env.*"]

Debug log for echo hi:

[WARN] [event-loop-stall] blocked for 56690ms monotonic ... cpu=28500ms
[DEBUG] Bash tool error (57048ms)

Removing the ** globs: the same command takes 84 ms.

Related: #68587

What Should Happen?

It should not lockup (as it didn't previously)

Error Messages/Logs

Steps to Reproduce

see above

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.1.296

Platform

Anthropic API

Operating System

Ubuntu/Debian Linux

Terminal/Shell

Other

Additional Information

_No response_