Under the hood
Useful3 Signal4
Bash permission checks flag when a command too complex to analyse was allowed only by exact text match.
What's wrong with this entry?
Anonymous. No account, no email.
What
The bash permission evaluator now carries a diagnostics object through parsing, holding the parsed command structure and flagging tooComplexByteExactAllow when a command too complex to analyse was permitted only by an exact character-for-character match against a rule. Later checks read that flag back.
Evidence
tooComplexByteExactAllow
Strings lifted out of the shipped bundle, so the claim above can be checked against them.