MediaMetz/gemini-cli
1
0
Fork 0
mirror of https://github.com/google-gemini/gemini-cli.git synced 2026-06-18 15:27:00 -07:00
Code Issues Packages Projects Releases Wiki Activity

chore: remove git allowlist

Browse Source
This commit is contained in:
galz10
2026-03-12 10:29:25 -07:00
parent a9608ad5b6
commit 1dd4a7ff61
1 changed files with 0 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/core/src/services/sandboxManager.ts
-27
View File
@@ -113,28 +113,6 @@ export class StandardSandboxManager implements SandboxManager {
// Start with explicitly allowed paths from config
const allowedPaths = [...(sandboxConfig.allowedPaths || [])];
// Auto-detect Git Worktree metadata paths
try {
const gitDotPath = path.join(options.cwd, '.git');
if (fs.existsSync(gitDotPath)) {
const stat = fs.lstatSync(gitDotPath);
if (stat.isFile()) {
const content = fs.readFileSync(gitDotPath, 'utf8').trim();
const match = content.match(/^gitdir:\s*(.+)$/);
if (match?.[1]) {
const gitDir = path.resolve(options.cwd, match[1]);
allowedPaths.push(gitDir);
allowedPaths.push(path.dirname(gitDir));
allowedPaths.push(path.dirname(path.dirname(gitDir)));
}
} else if (stat.isDirectory()) {
allowedPaths.push(gitDotPath);
}
}
} catch (e) {
debugLogger.debug('Failed to auto-detect git metadata paths:', e);
}
fs.writeFileSync(
profilePath,
@@ -217,11 +195,6 @@ export class StandardSandboxManager implements SandboxManager {
'(allow file-ioctl (regex #"^/dev/tty.*"))',
'(allow file-ioctl (literal "/dev/ptmx"))',
// Git and User Config (Read-only)
`(allow file-read* (literal "${path.join(os.homedir(), '.gitconfig')}"))`,
`(allow file-read* (subpath "${path.join(os.homedir(), '.config/git')}"))`,
...(process.env['SSH_AUTH_SOCK'] ? [`(allow file-read* file-write* (literal "${process.env['SSH_AUTH_SOCK']}"))`] : []),
// Project Workspace and Temp
`(allow ${workspacePermission} (subpath "${path.resolve(options.cwd)}"))`,
...allowedPaths.map(p => `(allow ${workspacePermission} (subpath "${path.resolve(p)}"))`),