safe-chains 0.232.2

Auto-allow safe bash commands in agentic coding tools
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

//! Signalling a process the command did not start is never approved, at any level.

use crate::verdict::Verdict;

const SIGNALS: &[&str] = &[
    "pkill -f \"cat\" -U $(id -u) -x", "pkill -f cat", "pkill foo", "pkill -9 -x node", "killall foo", "killall -s foo", "killall -l",
    "kill 123", "kill -9 123", "kill -TERM %1", "kill $!", "sleep 5 & kill $!", "echo 1 | xargs kill", "echo 1 | xargs -I{} kill {}",
    "pgrep node | xargs kill -9", "echo foo | xargs pkill", "echo foo | xargs killall",
];

#[test]
fn signalling_other_processes_is_refused_at_every_level() {
    for level in ["paranoid", "reader", "editor", "developer", "local-admin", "network-admin"] {
        let (ceiling, engine) = crate::level_ceiling(level).expect("known level");
        for cmd in SIGNALS {
            let v = crate::command_verdict_ceilinged(cmd, ceiling, engine);
            assert_eq!(v, Verdict::Denied, "{level}: `{cmd}` approved");
        }
    }
}

#[test]
fn looking_at_processes_stays_approved() {
    for cmd in ["pgrep -f cat", "kill -l", "kill -0 123", "ps aux"] {
        assert!(crate::is_safe_command(cmd), "`{cmd}` refused");
    }
}