Closes two gaps that let destructive commands slip past the gate: absolute-path env wrappers and custom rules inside nested shell commands.
Fixed
- Fixed destructive commands being allowed when invoked through an absolute-path wrapper such as
/usr/bin/env git reset --hard,/usr/bin/env rm -rf ../outside, or the same commands behindsudo. Wrapper detection now compares the basename of the command, so a full path is unwrapped the same way a bareenvis. (#138) - Fixed custom policy rules being skipped for commands nested inside
bash -c,sh -c,eval, and shell function bodies when the command had a built-in analyzer, such asrm,rmdir,git,find,xargs, andparallel. Custom rules now apply at every nesting depth. (#139)