Skip to content

v1.1.4

Latest

Choose a tag to compare

@chouzz chouzz released this 14 Sep 12:46
eac63c2

Fixed

  • rm -rf on nested paths (e.g. /root/myapp/build, /tmp/build) is allowed again — the #18 hardening had started blocking every absolute-path rm -rf, breaking the tool's normal use and trivially bypassable via cd <dir> && rm -rf <subdir> (#21)
  • rm -rf still blocked for: top-level absolute paths (any argument, e.g. rm -rf /home /tmp), wildcard wipes (/home/*), critical system files (/etc/shadow, /etc/passwd, /etc/sudoers, /etc/fstab, /boot/*), and parent traversal
  • Keyword-layer pattern rm -rf /root\b no longer matches /root/child (word boundary between t and /)

Full Changelog: v1.1.3...v1.1.4