From f36f0fe4318f5c0c7e943d91adc2d49abf7c6ae8 Mon Sep 17 00:00:00 2001 From: Jeroen Schweitzer Date: Tue, 25 Aug 2026 20:33:17 +0200 Subject: [PATCH] fix(permissions): narrow rm -rf deny globs to their exact forms The trailing wildcard on the three rm -rf deny entries spanned path separators, so Bash(rm -rf /*) matched every absolute path on the machine rather than the filesystem root, and the ~ and $HOME entries had the same shape. Narrowed to the exact literal forms. These rules match literal command text, so they still stop a typo on rm -rf /, rm -rf ~ or rm -rf $HOME exactly, but they no longer stop a recursive delete aimed at any other path. That reduced cover is deliberate, not an oversight. Co-Authored-By: Claude --- .claude/settings.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.claude/settings.json b/.claude/settings.json index a0cff5b..c0aa25f 100644 --- a/.claude/settings.json +++ b/.claude/settings.json @@ -58,9 +58,9 @@ "Bash(git reset --hard*)", "Bash(git restore .*)", "Bash(mkfs*)", - "Bash(rm -rf $HOME*)", - "Bash(rm -rf /*)", - "Bash(rm -rf ~*)", + "Bash(rm -rf $HOME)", + "Bash(rm -rf /)", + "Bash(rm -rf ~)", "Bash(su *)", "Bash(sudo *)", "Bash(toj)",