claude-code - 💡(How to fix) Fix Fresh install should include default deny rules for credential paths [1 participants]

TL;DR

To address the security vulnerability, ship a default settings.json with deny rules for common credential paths, allowing users to opt-out if needed.

Guidance

• Implement the proposed settings.json with deny rules for sensitive paths, such as ~/.ssh/, ~/.aws/, and ~/.kube/, to restrict access by default.
• Consider adding a clear documentation or prompt to inform users about the new default settings and the option to remove deny rules if necessary.
• Review the suggested defaults to ensure they cover all relevant credential paths and are consistent with the application's security requirements.
• Test the updated settings.json to verify that it correctly denies access to the specified paths and allows users to opt-out as intended.

Example

{
  "permissions": {
    "deny": [
      "Read(~/.ssh/**)",
      "Read(~/.gnupg/**)",
      "Read(~/.aws/**)",
      "Read(~/.azure/**)",
      "Read(~/.kube/**)",
      "Read(~/.npmrc)",
      "Read(~/.git-credentials)",
      "Read(~/.config/gh/**)"
    ]
  }
}

Notes

This solution assumes that the settings.json file is used to configure permissions in Claude Code. The effectiveness of this fix depends on the application's implementation of permission handling and the user's ability to opt-out of the default deny rules.

Recommendation

Apply the proposed workaround by shipping a default settings.json with deny rules for common credential paths, as it provides a safer default configuration for users who may not be aware of the security implications.