christoph/flake-nixinator
1
Fork 0
Code Activity

Home/Nixinator: Update opencode permissions

Browse Source
This commit is contained in:
christoph
2026-09-16 11:05:18 +02:00
parent 2229f79617
commit 6519ae6625
1 changed files with 40 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
home/christoph/nixinator/default.nix
+40 -14
View File
@@ -281,19 +281,37 @@
"*" = "ask"; "*" = "ask";
"bash" = { "bash" = {
"*" = "ask"; "*" = "ask";
"ls *" = "allow"; "awk *" = "ask"; # Can modify files
"find *" = "ask"; # Don't want find -exec
"file *" = "allow";
"wc *" = "allow";
"grep *" = "allow";
"rg *" = "allow";
"test *" = "allow";
"echo *" = "allow";
"which *" = "allow";
"pwd *" = "allow";
"dirname *" = "allow";
"basename *" = "allow"; "basename *" = "allow";
"cmp *" = "allow";
"cut *" = "allow";
"df *" = "allow";
"dirname *" = "allow";
"du *" = "allow";
"echo *" = "allow";
"fd *" = "ask"; # Can execute commands
"file *" = "allow";
"find *" = "ask"; # Can execute commands
"grep *" = "allow";
"head *" = "allow";
"ls *" = "allow";
"nl *" = "allow";
"od *" = "allow";
"pwd *" = "allow";
"readlink *" = "allow"; "readlink *" = "allow";
"rg *" = "ask"; # Can execute commands
"sed *" = "ask"; # Can modify files
"sha256sum *" = "allow";
"sha512sum *" = "allow";
"sort *" = "ask"; # Can modify files
"stat *" = "allow";
"tail *" = "allow";
"test *" = "allow";
"tr *" = "allow";
"uniq *" = "ask"; # Can modify files
"wc *" = "allow";
"which *" = "allow";
"xargs *" = "ask"; # Can modify files
"cat *.env" = "deny"; "cat *.env" = "deny";
"cat *.env.*" = "deny"; "cat *.env.*" = "deny";
@@ -308,11 +326,19 @@
"nix why-depends *" = "allow"; "nix why-depends *" = "allow";
"nix derivation show *" = "allow"; "nix derivation show *" = "allow";
"nix store ping *" = "allow"; "nix store ping *" = "allow";
"nix stire diff-closures *" = "allow"; "nix store diff-closures *" = "allow";
"git status *" = "allow"; "git branch *" = "ask";
"git log *" = "allow"; "git check-ignore *" = "allow";
"git diff *" = "allow"; "git diff *" = "allow";
"git log *" = "allow";
"git ls-files *" = "allow";
"git ls-tree *" = "allow";
"git remote *" = "ask";
"git rev-list *" = "allow";
"git rev-parse *" = "allow";
"git stash *" = "ask";
"git status *" = "allow";
}; };
"external_directory" = { "external_directory" = {
"/nix/store/**" = "allow"; "/nix/store/**" = "allow";