openclaw - 💡(How to fix) Fix Bug: exec denied: allowlist miss despite correct configuration [9 comments, 5 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
openclaw/openclaw#56775Fetched 2026-04-08 01:47:57
View on GitHub
Comments
9
Participants
5
Timeline
9
Reactions
0
Author
Timeline (top)
commented ×8cross-referenced ×1
RAW_BUFFERClick to expand / collapse

Bug Report

exec工具始终返回 allowlist miss 错误,即使配置正确。

环境

  • OpenClaw 2026.3.27
  • Ubuntu 24.04
  • Node v25.8.1

问题

openclaw exec run "date" 失败,无论怎么修改配置(allowFrom、security、execApprovals 等)都无效。

已尝试

  • tools.exec.allowFrom 各种格式
  • session.provider 设置
  • security=full/allowlist/deny
  • exec-approvals.json
  • 重装、doctor --repair

影响

exec 工具完全不可用,但 Telegram 等其他功能正常。

extent analysis

Fix Plan

The fix involves updating the execApprovals.json file and ensuring correct configuration for allowFrom and security settings.

  • Update execApprovals.json to include the necessary approvals:
[
  {
    "command": "date",
    "approved": true
  }
]
  • Verify tools.exec.allowFrom is set to allow execution from the required sources. For example:
{
  "tools": {
    "exec": {
      "allowFrom": ["localhost", "127.0.0.1"]
    }
  }
}
  • Ensure security setting is not set to deny:
{
  "security": "allowlist"
}
  • Restart the OpenClaw service after applying the changes.

Verification

Run openclaw exec run "date" again to verify the fix. If successful, the command should execute without returning an allowlist miss error.

Extra Tips

  • Double-check the execApprovals.json file for any typos or incorrect formatting.
  • If issues persist, try setting security to full temporarily to isolate the problem.
  • Refer to the OpenClaw documentation for the most up-to-date configuration options and security best practices.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING