Hacktoberfest 2026: le issue che i maintainer hanno segnato per ottobre, aperte e adatte ai principianti. Sfoglia le issue Hacktoberfest

[Bug]: Project-boundary gate hard-codes /root/.local/ and /root/.claude/, so a non-root account cannot read its own tools, and there is no setting to allow a path

Aperta
  • Qualcosa non va?
#104 4 commenti 0 reazioni 0 assegnatari Vedi su GitHub

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
4/5
Tempo stimato
1-2 giorni
Idoneità per principianti
54/100
Tipo di issue
Bug
Chiarezza
Specificata chiaramente
Stato di attività
Attiva
Stack tecnologico
bash, linux, shell
Ambito
cli, security

Direzione di ricerca

Read agents/context/check-project-boundary.sh, especially READ_ALLOWED_PREFIXES around line 753, and trace how ~ paths are expanded and checked. Reproduce the non-root case from the issue using ls ~/.local/bin/fw or grep -n x ~/some-tool; done means the account’s own configured read paths are handled as expected without weakening the boundary gate. The issue describes broader configuration and executable-tool requests that may need scope decisions.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

area:governance bug severity:medium status:in-progress triaged
Bug Description

agents/context/check-project-boundary.sh, READ_ALLOWED_PREFIXES (around line 753) contains '/root/.local/' # user shim install dir and '/root/.claude/' # Claude Code state. On a non-root account, $HOME/.local/ and $HOME/.claude/ are refused, although the comments describe exactly those directories.

Since 1.8.11 the gate expands ~ as bash does (T-3768), so every ~/... argument outside the project is now refused. Under the 1.8.6 hooks, ls -la ~/.local/bin/fw and cmp ~/.local/bin/fw <file> passed in the same session.

Cases met on this host after the upgrade, all read-only or the operator's own cross-project tool:

  • ~/passer --help (the operator's script for leaving a message to another project);
  • grep -n FW_ROUTED_FROM ~/.local/bin/fw;
  • reading a shared conventions file and another project's message file under $HOME.

The gate gives no way to allow a path: READ_ALLOWED_PREFIXES and READ_ALLOWED_EXACT are literals, and no environment variable or fw config key is read. Meanwhile Claude Code's own Read tool still reads the same files, so the gate does not protect them; it only blocks shell use.

Steps to Reproduce
  1. Non-root account, project under $HOME/<project>.
  2. Ask the agent to run ls ~/.local/bin/fw or grep -n x ~/some-tool.
  3. PROJECT BOUNDARY BLOCK — Command Targets Another Project, Reason: Outside-path argument /home/<account>/.local/bin/fw (not in read-side allowlist).
Expected Behavior
  1. $HOME/.local/ and $HOME/.claude/ (expanded) instead of /root/....
  2. A project or host setting for extra read-only paths (for example fw config set BOUNDARY_READ_ALLOW "<path>:<path>"), and ideally one for named operator tools that may be executed.
Actual Behavior

The account's own tools and shared read-only files are unreadable from Bash on any non-root install, with no supported way to allow them.

fw doctor output
AI Agent

Claude Code

Operating System

Linux

Additional Context

1.8.11 (e42aa41bf), vendored consumer, Linux (Ubuntu 20.04), non-root account, Claude Code. Also found independently by another consumer project on the same host; its reproduction was re-run here on 1.8.11.

Lingua principale
Shell
Stelle
16
Fork
6
Merge medio
6h 24m
PR unite (30g)
5

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di DimitriGeelen/agentic-engineering-framework

Tutte le issue di DimitriGeelen/agentic-engineering-framework

Issue simili

Altre issue su Shell/Bash

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.