From 3536c4060829962e2406d3405c3a537619ff17ba Mon Sep 17 00:00:00 2001 From: Jeroen Schweitzer Date: Tue, 25 Aug 2026 20:31:15 +0200 Subject: [PATCH] fix(permissions): narrow rm -rf deny globs to their exact forms The trailing wildcard on the three rm -rf deny entries spanned path separators, so Bash(rm -rf /*) matched every absolute path on the machine rather than the filesystem root, and the ~ and $HOME entries had the same shape. Narrowed to the exact literal forms. These rules match literal command text, so they still stop a typo on rm -rf /, rm -rf ~ or rm -rf $HOME exactly, but they no longer stop a recursive delete aimed at any other path. That reduced cover is deliberate, not an oversight. --- .claude/settings.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.claude/settings.json b/.claude/settings.json index 7b9fb67..964acf2 100644 --- a/.claude/settings.json +++ b/.claude/settings.json @@ -57,9 +57,9 @@ "Bash(psql * -c DROP*)", "Bash(psql * DROP DATABASE*)", "Bash(psql * TRUNCATE*)", - "Bash(rm -rf $HOME*)", - "Bash(rm -rf /*)", - "Bash(rm -rf ~*)", + "Bash(rm -rf $HOME)", + "Bash(rm -rf /)", + "Bash(rm -rf ~)", "Bash(su *)", "Bash(sudo *)", "Bash(toj)",