Configure permissions changedpermissions
Nearest release: v2.1.236, published 3 hours after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+6added
Lines−0removed
From line
195
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits70to this page, all time
#### Redirections
The whole hunk
from line 195, old and new numbered
/
from line 195
195195
196196Claude Code recognizes a built-in set of Bash commands as read-only and runs them without a permission prompt in every mode. These include `ls`, `cat`, `echo`, `pwd`, `head`, `tail`, `grep`, `find`, `wc`, `which`, `diff`, `stat`, `du`, `cd`, and read-only forms of `git`. The set is not configurable; to require a prompt for one of these commands, add an `ask` or `deny` rule for it.
197197
198A redirect such as `ls > out.txt` adds a check on the target. See [Redirections](#redirections).
199
198200Unquoted glob patterns are permitted for commands whose every flag is read-only, so `ls *.ts` and `wc -l src/*.py` run without a prompt.
199201
200202In Manual mode, commands from this set still prompt in these cases:
from line 229
227229
228230 Note that using WebFetch alone doesn't prevent network access. If Bash is allowed, Claude can still use `curl`, `wget`, or other tools to reach any URL.
229231</Warning>
232
233#### Redirections
234
235Claude Code checks the target of an output redirection, such as `>`, `>>`, or `2>`, as a file write. The check covers your `Edit` allow and deny rules, [protected paths](/docs/en/permission-modes#protected-paths), and the [working directories](#working-directories). A rule such as `Bash(git commit *)` allows the command, not the target. A `/dev/null` target isn't checked. A target that starts with `~` or contains a glob character needs approval.
230236
231237### PowerShell
232238
No line in this hunk matches that.