oz0 approval allowlist

For: Operators and developers looking up a command.

Approve a shell command the tenant's command rules asked a person about, and add a command rule that allows such commands from now on; with --refuse, deny it and add a rule that refuses them. It is the approval card's "Approve and always allow" and "Deny and always refuse".

The rule's pattern is suggested from the command's parse, never its text: the narrowest one, this command with every argument pinned (the programs that feed it, such as a download piped into a shell, as earlier stages).

Without --pattern the command prints the suggestion with the steps each token widens by, one at a time (a flag's value by its last segment, module.test.vpc to module.test.*; a path to its class, [inside-workdir]; any other argument to *; then ** for the rest), and saves the narrowest. The program and its subcommand never widen.

What it will not save, each refused with its reason:

• an allow of a command the reader could not read: such a command always asks, so no allow can match it (--refuse writes a refuse over the floor, cmd.unreadable, for the agent instead);
• an allow that names only a program a default asked about (rm **, terraform **), or leaves a subcommand open;
• an allow of running what a command downloads, unless every URL is written out in full over https and its host is on the tenant's egress list: what a URL serves can change after it was approved, so download it, check its hash, then run it;
• a pattern that would not decide this very command as asked (one broader than the default that asked, which then still asks first), or a token that looks like a credential.

The rule applies to the agent that asked (--scope agent, the default), the agents of one plugin (--scope plugin --plugin NAME) or every agent (--scope tenant); it lasts 30 days unless --for says 7d or none, may start in shadow mode (--shadow), and records the approval and job it came from, who proposed it and why (--reason, required).

A refuse acts at once; an allow acts at once unless the tenant has four eyes on, when it waits as a change request for another admin (oz0 change list). Someone who decides approvals but may not change the tool policy files either for a tenant admin. The approval is decided as well: approved for an allow, denied for a refuse, with the reason as its comment.

The impact line counts what the rule would have allowed (or refused) among the last 30 days' command decisions in the audit trail. Those entries keep the program and what the defaults found, never the command, so it is at most that many; it is one line, not a full preview of the change. --preview prints the suggestion and the checks and saves nothing. The command is the job's content: reading it takes the content permission.

The edge signs a receipt for the card, for you, which management checks before it takes the rule: this needs the job's node up.

Usage

oz0 approval allowlist JOB APPROVAL [flags]

Flags

Inherited flags

See all oz0 commands and the global flags.