From 9d34b94bfb6e67ba302aa6b763282450c46a38a7 Mon Sep 17 00:00:00 2001 From: Jeroen Schweitzer Date: Tue, 25 Aug 2026 20:31:29 +0200 Subject: [PATCH] fix(permissions): narrow rm -rf deny globs to their exact forms The trailing wildcard on the three rm -rf deny entries spanned path separators, so Bash(rm -rf /*) matched every absolute path on the machine rather than the filesystem root, and the ~ and $HOME entries had the same shape. Narrowed to the exact literal forms. These rules match literal command text, so they still stop a typo on rm -rf /, rm -rf ~ or rm -rf $HOME exactly, but they no longer stop a recursive delete aimed at any other path. That reduced cover is deliberate, not an oversight. --- .claude/settings.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.claude/settings.json b/.claude/settings.json index 0a7c9d9..2a3d9f1 100644 --- a/.claude/settings.json +++ b/.claude/settings.json @@ -55,9 +55,9 @@ "Bash(git reset --hard*)", "Bash(git restore .*)", "Bash(mkfs*)", - "Bash(rm -rf $HOME*)", - "Bash(rm -rf /*)", - "Bash(rm -rf ~*)", + "Bash(rm -rf $HOME)", + "Bash(rm -rf /)", + "Bash(rm -rf ~)", "Bash(su *)", "Bash(sudo *)", "Bash(toj)",