refactor(security): simplify system.run approval model

This commit is contained in:
Peter Steinberger
2026-03-11 01:42:47 +00:00
parent 5716e52417
commit 68c674d37c
32 changed files with 332 additions and 207 deletions

View File

@@ -18,12 +18,12 @@
}
},
{
"name": "shell wrapper accepts shell payload raw command when no positional argv carriers",
"name": "shell wrapper accepts shell payload raw command at ingress",
"command": ["/bin/sh", "-lc", "echo hi"],
"rawCommand": "echo hi",
"expected": {
"valid": true,
"displayCommand": "echo hi"
"displayCommand": "/bin/sh -lc \"echo hi\""
}
},
{
@@ -45,12 +45,12 @@
}
},
{
"name": "env wrapper shell payload accepted when prelude has no env modifiers",
"name": "env wrapper shell payload accepted at ingress when prelude has no env modifiers",
"command": ["/usr/bin/env", "bash", "-lc", "echo hi"],
"rawCommand": "echo hi",
"expected": {
"valid": true,
"displayCommand": "echo hi"
"displayCommand": "/usr/bin/env bash -lc \"echo hi\""
}
},
{