Skip to content

Unable to use: shared binary also implements critical commands #175

@emlautarom1

Description

@emlautarom1

Just installed fence through Nix on Fedora Workstation 43 (x86):

$ nix profile install nixpkgs#fence
$ fence --version
fence - lightweight, container-free sandbox for running untrusted commands
  Version: 0.1.58
  Built:   1970-01-01T00:00:00Z
  Commit:  refs/tags/v0.1.58

I tried to run fence with Claude Code and I got the following output:

$ fence -t code-relaxed -- claude
[fence:linux] runtime exec deny warning for /nix/store/d75200gb22v7p0703h5jrkgg8bqydk5q-coreutils-9.8/bin/coreutils (requested: chroot): shared binary also implements critical commands [cat head tail +30 more detected aliases, use --debug for expanded details], which will be collaterally blocked. To skip runtime blocking of "chroot" and silence this warning, add it to "acceptSharedBinaryCannotRuntimeDeny" in your command config.
[fence:landlock-wrapper] Exec failed: permission denied

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions