{"version":"2.1.259","anchor":"new-deny-checked-commands-greprgdiffgitcpmv-and-generi","canonical_anchor":"new-deny-checked-commands-greprgdiffgitcpmv-and-generi","heading":"New deny-checked commands: grep\/rg\/diff\/git\/cp\/mv and generic argument-path extraction","tier":"notice","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.259\/e\/new-deny-checked-commands-greprgdiffgitcpmv-and-generi","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.259","markdown":"### New deny-checked commands: grep\/rg\/diff\/git\/cp\/mv and generic argument-path extraction\n\nPath deny rules now extract file arguments from more flag shapes and apply to grep, rg, diff, git, cp and mv.\n\nPath-restriction deny rules now reach further into command arguments: file-like arguments are extracted from `-e`\/`-f`\/`--file` flags, `key=value` pairs, `@file` tokens, colon-separated tokens, and combined short flags, and denied if the resolved path matches a `Read()` deny rule. Separately, `grep`, `egrep`, `fgrep`, `rg`, `diff`, `git`, `cp`, and `mv` get this same path check, falling back to an 'ask' prompt when the path can't be resolved after a `cd`.\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 1\/5"}