claude-code - 💡(How to fix) Fix Bash tool executed `brew install` without prompting user for approval [1 comments, 2 participants]

TL;DR

The permission system may not be correctly configured or prioritizing rules, allowing the Bash(brew install) command to execute without user approval.

Guidance

• Review the permission configuration files (~/.claude/settings.json, .claude/settings.json, and .claude/settings.local.json) to ensure that there are no implicit allow rules or missing deny rules that could be bypassing the expected behavior.
• Check the documentation for the Claude Code VSCode extension (v2.1.109) to understand how it handles permission configurations and if there are any known issues or limitations.
• Verify that the Bash(brew install) command is not being executed through a different path or alias that might not be covered by the current permission rules.
• Consider adding an explicit deny rule for Bash(brew *) to test if the permission system is correctly applying the rules.

Example

No code snippet is provided as the issue is related to configuration and permission rules.

Notes

The issue might be related to the specific version of the Claude Code VSCode extension or the Helm version, but without further information, it's difficult to determine the root cause.

Recommendation

Apply a workaround by adding an explicit deny rule for Bash(brew *) to the permission configuration to ensure that the command is properly restricted until the root cause is identified and fixed.