ober/jerboa-code
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases 1 Packages Wiki Activity Actions

fix: enforce permissions across shell syntax #54

Closed
ober wants to merge 1 commit from fix/permission-shell-segments into master
pull from: fix/permission-shell-segments
merge into: ober:master
Conversation 0 Commits 1 Files changed 5 +159 -34
ober commented 2026-09-22 03:13:06 -04:00
Owner
Copy link

Parse shell command structure for permission decisions and check every executed segment, conservatively prompting or rejecting substitutions, wrappers, pipes, and unparseable syntax. Regression coverage verifies deny rules cannot be bypassed with harmless fixture executables or shell operators.

Validation:

  • Jerboa balance checks passed for changed .ss files.
  • VERSION and package manifests bumped to 0.5.1.
Parse shell command structure for permission decisions and check every executed segment, conservatively prompting or rejecting substitutions, wrappers, pipes, and unparseable syntax. Regression coverage verifies deny rules cannot be bypassed with harmless fixture executables or shell operators. Validation: - Jerboa balance checks passed for changed `.ss` files. - VERSION and package manifests bumped to 0.5.1.
fix: enforce permissions across shell syntax
Some checks failed
version-policy / required (pull_request) Successful in 3m44s
Details
required-ci / required (pull_request) Failing after 6m53s
Details
94ce7e7b70
ober closed this pull request 2026-09-22 11:43:53 -04:00
Some checks failed
version-policy / required (pull_request) Successful in 3m44s
Required
Details
required-ci / required (pull_request) Failing after 6m53s
Required
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ober/jerboa-code!54
No description provided.