3 ms·

So does everyone just run with giving full permissions on Claude code these days? It seems like I’m constantly coming back to CC to validate that it’s not runni

by tppts 8mo ago

So does everyone just run with giving full permissions on Claude code these days? It seems like I’m constantly coming back to CC to validate that it’s not running some bash that’s going to nuke my system. I would love to be able to fully step away but it feels like I can’t.

apetresc 8mo ago
Honest question, when was the last time you caught it trying to use a command that was going to "nuke your system"?
- tppts 8mo ago
  “Nuke” is maybe too strong of a word, but it has not been uncommon for me to see it trying to install specific versions of languages on my machine, or services I intentionally don’t have configured, or sometimes trying to force npm when I’m using bun, etc.
- dymk 8mo ago
  Maybe once a month
apitman 8mo ago
I run my agents with full permissions in containers. Feels like a reasonable tradeoff. Bonus is I can set up each container with exactly the stack needed.
glitchcrab 8mo ago
I sandbox everything inside https://github.com/strongdm/leash https://github.com/strongdm/leash That way the blast radius is vastly reduced.