diff options
| author | Joe Mou <dev@mou.fo> | 2026-04-13 21:46:00 -0400 |
|---|---|---|
| committer | Joe Mou <dev@mou.fo> | 2026-04-15 00:02:13 -0400 |
| commit | 0350d4c87cb68bf50ed0d6a1290fc497ad8fd7b1 (patch) | |
| tree | daded5c90024216972f09c109391b7f6b1e4244e /hostnix/mojo/packages/claude-code/claude.sb | |
| parent | 1c9249426a274884f8104e26ca63e4b3b3578687 (diff) | |
mojo: Refine Claude Code directory access
Give access to .dotfiles, fix ~/src subdirectories, and check that we
don't allow access to everything.
Diffstat (limited to 'hostnix/mojo/packages/claude-code/claude.sb')
| -rw-r--r-- | hostnix/mojo/packages/claude-code/claude.sb | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/hostnix/mojo/packages/claude-code/claude.sb b/hostnix/mojo/packages/claude-code/claude.sb index 72797de..1117b18 100644 --- a/hostnix/mojo/packages/claude-code/claude.sb +++ b/hostnix/mojo/packages/claude-code/claude.sb @@ -293,4 +293,7 @@ ;; themselves. Otherwise it will set PATH to "" and disable colored output (allow file-read* (literal "/Users")) (allow file-read* (literal "/Users/joe")) -(allow file-read* (literal "/Users/joe/src")) +(allow file-read* (subpath "/Users/joe/src")) + +(allow file-read* (subpath (string-append (param "HOME_DIR") "/.dotfiles"))) +(deny file-read* (subpath (string-append (param "HOME_DIR") "/.dotfiles/tmp"))) |