Skip to content

feat(exec): add 8 safe-bin profiles for WS-2.4#6

Merged
Piboonsak merged 1 commit intomainfrom
feat/ws24-exec-profiles
Mar 1, 2026
Merged

feat(exec): add 8 safe-bin profiles for WS-2.4#6
Piboonsak merged 1 commit intomainfrom
feat/ws24-exec-profiles

Conversation

@Piboonsak
Copy link
Owner

Changes

  • Add SafeBinProfileFixture entries for date, uptime, whoami, hostname, ps, tree, curl, wget
  • Update docs/tools/exec-approvals.md denied-flags section
  • All existing tests pass + new denied-flag matrix entries auto-generated

Closes ISSUE-001

…ree,curl,wget)

WS-2.4 ISSUE-001: Commands in safeBins config but lacking profiles
were logged as 'ignoring unprofiled' and not auto-approved.

Adds SafeBinProfileFixture entries with appropriate deniedFlags:
- date: deny --file/-f
- uptime: no flags needed
- whoami: no flags needed
- hostname: deny -b/-F/--boot-id/--set
- ps: no flags needed
- tree: deny --fromfile
- curl: deny --config/-K/--output/-o/--upload-file/-T
- wget: deny --config/--input-file/-i/--output-document/-O

Updates exec-approvals.md denied-flags section to match.
@Piboonsak Piboonsak merged commit 740bc40 into main Mar 1, 2026
2 of 9 checks passed
@Piboonsak Piboonsak deleted the feat/ws24-exec-profiles branch March 1, 2026 12:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant