From d3161d565c437ca13c2b7a2cafa678e27df3c482 Mon Sep 17 00:00:00 2001 From: Ryota Ikezawa Date: Mon, 28 Sep 2026 10:39:30 +0900 Subject: [PATCH] fix(claude): drop the :* suffix from the rm -rf /* deny rule A trailing :* is shorthand for a trailing space-star, so Bash(rm -rf /*:*) was parsed as a literal prefix and matched nothing useful, and Claude Code warned about it at startup. Bash(rm -rf /*) is the only form that covers rm -rf /*; it also denies any rm -rf on an absolute path. Co-Authored-By: Claude Fable 5.1 --- home/dot_claude/settings.json.tmpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/home/dot_claude/settings.json.tmpl b/home/dot_claude/settings.json.tmpl index f2a8d54..02a7b62 100644 --- a/home/dot_claude/settings.json.tmpl +++ b/home/dot_claude/settings.json.tmpl @@ -42,7 +42,7 @@ "deny": [ "Bash(sudo:*)", "Bash(rm -rf /:*)", - "Bash(rm -rf /*:*)", + "Bash(rm -rf /*)", "Bash(rm -rf ~:*)", "Bash(rm -rf .:*)", "Bash(rm -rf ..:*)",