Claude Code v2.1.214 Requires Permission for Docker Daemon-Redirect Flags (`--url`, `--connection`, `--identity`)

Claude Code Changelog·high signal

Docker commands carrying daemon-redirect flags — including Podman's `docker` shim and its remote mode — previously ran with no permission prompt, meaning an allowed `docker` invocation could be pointed at an arbitrary remote daemon. v2.1.214 now prompts for these. The same release also flips `file` commands using `-m`/`--magic-file` or `-f`/`--files-from` from auto-allowed-as-read-only to permission-required, closing another path where a nominally read-only command reads attacker-chosen files.