[BUG] Bash tool sandbox broken on Linux after kernel update — bwrap missing --dev /dev

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Description:

After a Fedora system update + reboot (kernel 6.19.8-200.fc43.x86_64), all commands in the Bash tool silently fail. Root cause: Claude Code's bwrap sandbox does not include --dev /dev, which
causes /dev/null to be inaccessible inside the sandbox.

Reproduce:
# Fails (as Claude Code runs it):
bwrap --ro-bind / / -- git --version
# fatal: could not open '/dev/null' for reading and writing: Permission denied

# Works (with --dev /dev added):
bwrap --ro-bind / / --dev /dev -- git --version
# git version 2.53.0

Fix: Add --dev /dev to the bwrap sandbox invocation.

Workaround: None found — "sandbox": {"enabled": false} in settings.json does not help.

Environment:

• OS: Fedora 43, kernel 6.19.8-200.fc43.x86_64
• Claude Code: 2.1.62 / 2.1.80
• bubblewrap: rpm -q bubblewrap

bubblewrap 0.11.0

What Should Happen?

In claude I'm unable to run commands (git, ps, cat whatever). I get always error.

Error Messages/Logs

# Fails (as Claude Code runs it):
  bwrap --ro-bind / / -- git --version
  # fatal: could not open '/dev/null' for reading and writing: Permission denied

Steps to Reproduce

# Fails (as Claude Code runs it):
bwrap --ro-bind / / -- git --version
# fatal: could not open '/dev/null' for reading and writing: Permission denied

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

2.1.80

Claude Code Version

2.1.80

Platform

Anthropic API

Operating System

Other Linux

Terminal/Shell

Other

Additional Information

_No response_