Dmitry
136 lines
8.1 KiB
Plaintext
136 lines
8.1 KiB
Plaintext
# ── Навигация и чтение ─────────────────────────────────────────────────────
|
|
prefix_rule(pattern=["ls"], decision="allow")
|
|
prefix_rule(pattern=["ll"], decision="allow")
|
|
prefix_rule(pattern=["la"], decision="allow")
|
|
prefix_rule(pattern=["eza"], decision="allow")
|
|
prefix_rule(pattern=["find"], decision="allow")
|
|
prefix_rule(pattern=["fd"], decision="allow")
|
|
prefix_rule(pattern=["pwd"], decision="allow")
|
|
prefix_rule(pattern=["which"], decision="allow")
|
|
prefix_rule(pattern=["type"], decision="allow")
|
|
prefix_rule(pattern=["whereis"], decision="allow")
|
|
prefix_rule(pattern=["cat"], decision="allow")
|
|
prefix_rule(pattern=["bat"], decision="allow")
|
|
prefix_rule(pattern=["head"], decision="allow")
|
|
prefix_rule(pattern=["tail"], decision="allow")
|
|
prefix_rule(pattern=["less"], decision="allow")
|
|
prefix_rule(pattern=["wc"], decision="allow")
|
|
prefix_rule(pattern=["file"], decision="allow")
|
|
prefix_rule(pattern=["stat"], decision="allow")
|
|
|
|
# ── Поиск и текст ───────────────────────────────────────────────────────────
|
|
prefix_rule(pattern=["grep"], decision="allow")
|
|
prefix_rule(pattern=["rg"], decision="allow")
|
|
prefix_rule(pattern=["ag"], decision="allow")
|
|
prefix_rule(pattern=["echo"], decision="allow")
|
|
prefix_rule(pattern=["printf"], decision="allow")
|
|
prefix_rule(pattern=["sed"], decision="allow")
|
|
prefix_rule(pattern=["awk"], decision="allow")
|
|
prefix_rule(pattern=["cut"], decision="allow")
|
|
prefix_rule(pattern=["sort"], decision="allow")
|
|
prefix_rule(pattern=["uniq"], decision="allow")
|
|
prefix_rule(pattern=["tr"], decision="allow")
|
|
prefix_rule(pattern=["jq"], decision="allow")
|
|
prefix_rule(pattern=["diff"], decision="allow")
|
|
|
|
# ── Файловые операции ───────────────────────────────────────────────────────
|
|
prefix_rule(pattern=["mkdir"], decision="allow")
|
|
prefix_rule(pattern=["touch"], decision="allow")
|
|
prefix_rule(pattern=["cp"], decision="allow")
|
|
prefix_rule(pattern=["mv"], decision="allow")
|
|
prefix_rule(pattern=["chmod"], decision="allow")
|
|
prefix_rule(pattern=["chown"], decision="allow")
|
|
prefix_rule(pattern=["ln"], decision="allow")
|
|
|
|
# ── Git ─────────────────────────────────────────────────────────────────────
|
|
prefix_rule(pattern=["git"], decision="allow")
|
|
|
|
# ── Chezmoi ─────────────────────────────────────────────────────────────────
|
|
prefix_rule(pattern=["chezmoi"], decision="allow")
|
|
|
|
# ── Node.js ─────────────────────────────────────────────────────────────────
|
|
prefix_rule(pattern=["npm"], decision="allow")
|
|
prefix_rule(pattern=["npx"], decision="allow")
|
|
prefix_rule(pattern=["yarn"], decision="allow")
|
|
prefix_rule(pattern=["pnpm"], decision="allow")
|
|
prefix_rule(pattern=["node"], decision="allow")
|
|
prefix_rule(pattern=["bun"], decision="allow")
|
|
|
|
# ── Ruby ────────────────────────────────────────────────────────────────────
|
|
prefix_rule(pattern=["bundle"], decision="allow")
|
|
prefix_rule(pattern=["gem"], decision="allow")
|
|
prefix_rule(pattern=["ruby"], decision="allow")
|
|
prefix_rule(pattern=["rbenv"], decision="allow")
|
|
prefix_rule(pattern=["rspec"], decision="allow")
|
|
prefix_rule(pattern=["rails"], decision="allow")
|
|
prefix_rule(pattern=["bin/rails"], decision="allow")
|
|
|
|
# ── Python ──────────────────────────────────────────────────────────────────
|
|
prefix_rule(pattern=["python"], decision="allow")
|
|
prefix_rule(pattern=["python3"], decision="allow")
|
|
prefix_rule(pattern=["pip"], decision="allow")
|
|
prefix_rule(pattern=["pip3"], decision="allow")
|
|
prefix_rule(pattern=["uv"], decision="allow")
|
|
prefix_rule(pattern=["pytest"], decision="allow")
|
|
prefix_rule(pattern=["poetry"], decision="allow")
|
|
|
|
# ── Rust / Go / Make ────────────────────────────────────────────────────────
|
|
prefix_rule(pattern=["cargo"], decision="allow")
|
|
prefix_rule(pattern=["rustc"], decision="allow")
|
|
prefix_rule(pattern=["rustup"], decision="allow")
|
|
prefix_rule(pattern=["go"], decision="allow")
|
|
prefix_rule(pattern=["make"], decision="allow")
|
|
|
|
# ── Системная информация ────────────────────────────────────────────────────
|
|
prefix_rule(pattern=["date"], decision="allow")
|
|
prefix_rule(pattern=["uname"], decision="allow")
|
|
prefix_rule(pattern=["hostname"], decision="allow")
|
|
prefix_rule(pattern=["whoami"], decision="allow")
|
|
prefix_rule(pattern=["id"], decision="allow")
|
|
prefix_rule(pattern=["env"], decision="allow")
|
|
prefix_rule(pattern=["printenv"], decision="allow")
|
|
prefix_rule(pattern=["ps"], decision="allow")
|
|
prefix_rule(pattern=["df"], decision="allow")
|
|
prefix_rule(pattern=["du"], decision="allow")
|
|
prefix_rule(pattern=["free"], decision="allow")
|
|
prefix_rule(pattern=["uptime"], decision="allow")
|
|
prefix_rule(pattern=["lsof"], decision="allow")
|
|
prefix_rule(pattern=["ss"], decision="allow")
|
|
prefix_rule(pattern=["ip"], decision="allow")
|
|
prefix_rule(pattern=["ping"], decision="allow")
|
|
prefix_rule(pattern=["curl"], decision="allow")
|
|
prefix_rule(pattern=["wget"], decision="allow")
|
|
prefix_rule(pattern=["ssh"], decision="allow")
|
|
prefix_rule(pattern=["ssh-keygen"], decision="allow")
|
|
|
|
# ── Пакетный менеджер (только чтение) ───────────────────────────────────────
|
|
prefix_rule(pattern=["pacman", "-Q"], decision="allow")
|
|
prefix_rule(pattern=["pacman", "-Si"], decision="allow")
|
|
prefix_rule(pattern=["pacman", "-Ss"], decision="allow")
|
|
prefix_rule(pattern=["paru", "-Q"], decision="allow")
|
|
prefix_rule(pattern=["systemctl", "status"], decision="allow")
|
|
prefix_rule(pattern=["journalctl"], decision="allow")
|
|
|
|
# ── Инструменты ─────────────────────────────────────────────────────────────
|
|
prefix_rule(pattern=["resticprofile"], decision="allow")
|
|
prefix_rule(pattern=["restic"], decision="allow")
|
|
prefix_rule(pattern=["rclone"], decision="allow")
|
|
prefix_rule(pattern=["age"], decision="allow")
|
|
prefix_rule(pattern=["rtk"], decision="allow")
|
|
|
|
# ── Docker / Kubernetes (только чтение) ────────────────────────────────────
|
|
prefix_rule(pattern=["docker", "ps"], decision="allow")
|
|
prefix_rule(pattern=["docker", "images"], decision="allow")
|
|
prefix_rule(pattern=["docker", "logs"], decision="allow")
|
|
prefix_rule(pattern=["docker", "inspect"], decision="allow")
|
|
prefix_rule(pattern=["docker", "exec"], decision="allow")
|
|
prefix_rule(pattern=["kubectl", "get"], decision="allow")
|
|
prefix_rule(pattern=["kubectl", "describe"], decision="allow")
|
|
prefix_rule(pattern=["kubectl", "logs"], decision="allow")
|
|
|
|
# ── Shell wrappers ──────────────────────────────────────────────────────────
|
|
prefix_rule(pattern=["/usr/bin/zsh", "-lc"], decision="allow")
|
|
prefix_rule(pattern=["/bin/zsh", "-lc"], decision="allow")
|
|
prefix_rule(pattern=["/usr/bin/bash", "-c"], decision="allow")
|
|
prefix_rule(pattern=["/bin/bash", "-c"], decision="allow")
|