2331e682d413c2c71620b9873745591244bd53bf

Author
TheEdgeOfRage <git@theedgeofrage.com>
Committer
TheEdgeOfRage <git@theedgeofrage.com>
Date

Message

Prohibit reading the entire home directory

Diff

This diff is truncated to protect this page.

 1diff --git a/src/core/rules.ts b/src/core/rules.ts
 2index c8f2958fa190e9b85bcc8978bf905be32674b0b9..4c14fd448f61d700562efb9d00d3f83331a3b410 100644
 3--- a/src/core/rules.ts
 4+++ b/src/core/rules.ts
 5@@ -160,6 +160,7 @@ Ask only for:
 6 - Remote infrastructure, data, access, or deployment mutation: create, update, delete, grant, revoke, apply, or execute a write on production databases, Kubernetes, or cloud providers.
 7 - Irreversibly destructive Git operations, such as reset --hard or checking out files.
 8 - Stopping the Herdr server: \`herdr server stop\` or directly doing a listed risk.
 9+- When a command attempts to search the *ENTIRE* home directory for something, since that's very slow and rarely needed.
10