Struct SandboxSettings 

pub struct SandboxSettings {
    pub enabled: Option<bool>,
    pub auto_allow_bash_if_sandboxed: Option<bool>,
    pub excluded_commands: Option<Vec<String>>,
    pub allow_unsandboxed_commands: Option<bool>,
    pub network: Option<SandboxNetworkConfig>,
    pub ignore_violations: Option<SandboxIgnoreViolations>,
    pub enable_weaker_nested_sandbox: Option<bool>,
}

Sandbox settings configuration

Controls how Claude Code sandboxes bash commands for filesystem and network isolation.

Fields

enabled: Option<bool>

Enable bash sandboxing (macOS/Linux only)

auto_allow_bash_if_sandboxed: Option<bool>

Auto-approve bash commands when sandboxed (default: true)

excluded_commands: Option<Vec<String>>

Commands that should run outside the sandbox (e.g., [“git”, “docker”])

allow_unsandboxed_commands: Option<bool>

Allow commands to bypass sandbox via dangerouslyDisableSandbox

network: Option<SandboxNetworkConfig>

Network configuration for sandbox

ignore_violations: Option<SandboxIgnoreViolations>

Violations to ignore

enable_weaker_nested_sandbox: Option<bool>

Enable weaker sandbox for unprivileged Docker environments (Linux only)

Trait Implementations

impl Clone for SandboxSettings

fn clone(&self) -> SandboxSettings

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxSettings

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxSettings

fn default() -> SandboxSettings

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxSettings

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SandboxSettings

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.