Skip to content

Commit 31fa690

Browse files
authored
[AV-126795] Setup command deny list (#542)
1 parent 80bb133 commit 31fa690

1 file changed

Lines changed: 37 additions & 0 deletions

File tree

.factory/settings.json

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
{
2+
"commandDenylist": [
3+
"rm",
4+
"rm -rf",
5+
"rm -rf /",
6+
"rm -r",
7+
"rm -f",
8+
"git branch -d",
9+
"git branch -D",
10+
"git push --force",
11+
"git push -f",
12+
"git reset --hard",
13+
"sudo",
14+
"diskutil erase",
15+
"diskutil reformat",
16+
"diskutil zeroDisk",
17+
"dd",
18+
"mkfs",
19+
"newfs",
20+
"chmod -R 777",
21+
"shutdown",
22+
"reboot",
23+
"halt",
24+
"poweroff",
25+
"killall",
26+
"pkill",
27+
"launchctl unload",
28+
"systemsetup",
29+
"nvram",
30+
"csrutil",
31+
"spctl --disable",
32+
"defaults delete",
33+
"dscl",
34+
"sysctl -w",
35+
"pmset"
36+
]
37+
}

0 commit comments

Comments
 (0)