#We just open-sourced an OpenClaw

1 messages · Page 1 of 1 (latest)

lime socket
wooden bone
#

what if it doesnt use your blacklisted commands to rm ? and instead makes a ps1 script and runs in from a windows instance through a tunnel on powershell instead of bash ?

#

what if it writes a ruby-on-rails script and runs it to rm ?

#

what if it writes a pearl script and runs it ?

#

what if it uses one of the 600 other commands that are not rm and do the same thing ?

lime socket
#

Correct @wooden bone ! This is meant to be an initial list of rules and isn't exhaustive. I definitely saw OpenClaw try to get creative to go around rm commands with mv to trash or find delete.

We are working on creating more sophisticated rules as well that can detect unexpected tool calls.

What's cool is that with Cedar you can start with deny-all and just do allows. So you could deny all and only allow "ls", and if the agent tried to run "perl" it wouldn't be able to.

wooden bone
#

good luck with that because what i just release a package then ?