{"version":"2.1.232","anchor":"bash-policy-tracks-byte-exact-allows-of-unanalysable-command","canonical_anchor":"bash-policy-tracks-byte-exact-allows-of-unanalysable-command","heading":"Bash policy tracks byte-exact allows of unanalysable commands","tier":"internal","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.232\/e\/bash-policy-tracks-byte-exact-allows-of-unanalysable-command","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.232","markdown":"### Bash policy tracks byte-exact allows of unanalysable commands\n\nBash permission checks flag when a command too complex to analyse was allowed only by exact text match.\n\n**What**\n\nThe bash permission evaluator now carries a diagnostics object through parsing, holding the parsed command structure and flagging `tooComplexByteExactAllow` when a command too complex to analyse was permitted only by an exact character-for-character match against a rule. Later checks read that flag back.\n\n**Evidence**\n\n`tooComplexByteExactAllow`\n\n- Area: Permissions\n- Tier: Under the hood\n- Useful: 3\/5\n- Signal: 4\/5"}