view release on metacpan or  search on metacpan

lib/Acme/Claude/Shell/Tools.pm  view on Meta::CPAN

      reason  => 'Superuser command' },
    { pattern => qr/\bmkfs\b/,
      reason  => 'Filesystem formatting' },
    { pattern => qr/\bdd\b.*\bof=/,
      reason  => 'Direct disk write' },
    { pattern => qr/>\s*\/dev\//,
      reason  => 'Writing to device file' },
    { pattern => qr/\bchmod\s+(-R\s+)?777\b/,
      reason  => 'World-writable permissions' },
    { pattern => qr/\bchown\s+-R\b.*\//,
      reason  => 'Recursive ownership change' },
    { pattern => qr/\bkill\s+-9\b/,
      reason  => 'Forceful process termination' },
    { pattern => qr/\b(reboot|shutdown|halt|poweroff)\b/,
      reason  => 'System shutdown/reboot' },
    { pattern => qr/\bformat\b/,
      reason  => 'Disk formatting' },
    { pattern => qr/:\s*\(\s*\)\s*\{\s*:\s*\|\s*:\s*&\s*\}\s*;/,
      reason  => 'Fork bomb detected' },
    { pattern => qr/\bwget\b.*\|\s*(ba)?sh/i,
      reason  => 'Piping remote script to shell' },

t/03-dangerous-patterns.t  view on Meta::CPAN

      reason  => 'Superuser command' },
    { pattern => qr/\bmkfs\b/,
      reason  => 'Filesystem formatting' },
    { pattern => qr/\bdd\b.*\bof=/,
      reason  => 'Direct disk write' },
    { pattern => qr/>\s*\/dev\//,
      reason  => 'Writing to device file' },
    { pattern => qr/\bchmod\s+(-R\s+)?777\b/,
      reason  => 'World-writable permissions' },
    { pattern => qr/\bchown\s+-R\b.*\//,
      reason  => 'Recursive ownership change' },
    { pattern => qr/\bkill\s+-9\b/,
      reason  => 'Forceful process termination' },
    { pattern => qr/\b(reboot|shutdown|halt|poweroff)\b/,
      reason  => 'System shutdown/reboot' },
    { pattern => qr/\bformat\b/,
      reason  => 'Disk formatting' },
    { pattern => qr/:\s*\(\s*\)\s*\{\s*:\s*\|\s*:\s*&\s*\}\s*;/,
      reason  => 'Fork bomb detected' },
    { pattern => qr/\bwget\b.*\|\s*(ba)?sh/i,
      reason  => 'Piping remote script to shell' },

t/03-dangerous-patterns.t  view on Meta::CPAN

    ok(check_dangerous('dd if=/dev/zero of=/dev/sda'), 'dd device write detected');
    ok(check_dangerous('dd if=file.txt of=copy.txt'), 'dd with of= is flagged (can overwrite)');
    ok(!check_dangerous('dd if=file.txt'), 'dd without of= is safer');
};

subtest 'Device writes' => sub {
    ok(check_dangerous('echo "test" > /dev/sda'), 'Device write detected');
    ok(check_dangerous('cat foo > /dev/null'), 'Write to /dev/null detected');
};

subtest 'Permission changes' => sub {
    ok(check_dangerous('chmod 777 /etc'), 'chmod 777 detected');
    ok(check_dangerous('chmod -R 777 /home'), 'chmod -R 777 detected');
    ok(!check_dangerous('chmod 755 script.sh'), 'chmod 755 is usually safe');
    ok(!check_dangerous('chmod 644 file.txt'), 'chmod 644 is safe');
};

subtest 'Ownership changes' => sub {
    ok(check_dangerous('chown -R root /'), 'chown -R detected');
    ok(check_dangerous('chown -R user:user /home/user'), 'chown -R home detected');
    ok(!check_dangerous('chown user file.txt'), 'chown single file may be ok');
};

subtest 'Process killing' => sub {
    ok(check_dangerous('kill -9 1234'), 'kill -9 detected');
    ok(!check_dangerous('kill 1234'), 'kill without -9 may be ok');
    ok(!check_dangerous('killall process'), 'killall may be ok');
};