Claude Permissions Configuration

This repository contains a permissions configuration for Claude Code that provides a balanced approach between security and usability.

Overview

The settings.json file contains a permissions configuration that:

• Allows common development operations including:

  • File reading/editing for common source code and configuration files
  • Git operations (including push, force push, etc.)
  • Package management commands
  • Build and test commands
  • Directory navigation
  • Environment variable operations

• Denies potentially dangerous operations including:

  • System file modifications (/etc/*, /usr/*, /bin/*, /sbin/*)
  • Reading sensitive system files (passwd, shadow, SSH keys)
  • Certificate/key file operations (.key, .pem, .pfx, .p12)
  • Destructive commands (rm -rf /, fork bombs)
  • Privilege escalation (sudo, su)
  • System service management
  • Global package installations

Usage

Place this configuration in your project's .claude/settings.json file to apply these permissions.

Philosophy

This configuration aims to:

1. Enable productive development workflows without constant permission denials
2. Maintain security by blocking truly dangerous operations
3. Allow Claude to help with common tasks like git operations, file management, and package installations

Customization

Feel free to modify the allow/deny lists based on your specific security requirements and workflow needs.