Files
desklock/.claude
jpmschweitzerandClaude f36f0fe431
Test, Build and Push / test-gateway (push) Successful in 13s
Test, Build and Push / release (push) Skipped
Test, Build and Push / build-gateway (push) Skipped
fix(permissions): narrow rm -rf deny globs to their exact forms
The trailing wildcard on the three rm -rf deny entries spanned path
separators, so Bash(rm -rf /*) matched every absolute path on the
machine rather than the filesystem root, and the ~ and $HOME entries
had the same shape. Narrowed to the exact literal forms.

These rules match literal command text, so they still stop a typo on
rm -rf /, rm -rf ~ or rm -rf $HOME exactly, but they no longer stop a
recursive delete aimed at any other path. That reduced cover is
deliberate, not an oversight.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-08-25 20:33:17 +02:00
..