openclaw - 💡(How to fix) Fix [Bug]: tools.exec.security config setting completely ignored [1 participants]

Bug type

Regression (worked before, now fails)

Beta release blocker

No

Summary

Issue: The `tools.exec.security` configuration setting has no effect on runtime enforcement. Exec remains denied regardless of config value.

Config tested: ```json { "tools": { "exec": { "security": "full" } } } ```

Expected behavior: With `security: "full"`, exec commands should run without approval.

Actual behavior: All exec calls return `exec denied: host=gateway security=deny`

Tested on channels:

• webchat (TUI)
• WhatsApp

Troubleshooting performed:

• ✅ Verified config syntax with `jq .tools`
• ✅ Confirmed gateway reads correct config file
• ✅ Restarted gateway multiple times (`openclaw gateway restart`)
• ✅ Killed all processes and cleared session state
• ✅ Checked for env var overrides (none found)
• ✅ Checked systemd service file (no overrides)
• ✅ Tested `"allowlist"` and `"full"` modes (both denied)
• ✅ Schema validation confirms valid enum values

Result: Config setting is parsed correctly but has zero effect on runtime enforcement."

Steps to reproduce

Use security: full and still can't run commands

Expected behavior

with full it should be able to run commands

Actual behavior

Everything is blocked no matter security setting

OpenClaw version

2026.3.31 (213a704)

Operating system

Ubuntu 24.04

Install method

npm

Model

github-copilot/claude-sonnet-4.5

Provider / routing chain

openclaw

Additional provider/model setup details

No response

Logs, screenshots, and evidence

Impact and severity

No response

Additional information

No response