chore: ctr 全部放行（None），支持 k8s.io 等任意子命令命名空间

2026-07-25 15:16:04 +08:00
parent 841eb26ea0
commit defb09ef97
1 changed files with 1 additions and 1 deletions
@@ -190,7 +190,7 @@ SHELL_READ_ONLY_COMMANDS: dict[str, set[str] | None] = {
    },
    "journalctl": None,  # 只读，任意参数 (-u, -n, --no-pager, --since 等)
    "crictl": {"ps", "inspect", "logs", "info", "version", "images", "stats"},
-    "ctr": {"containers", "images", "namespaces", "tasks", "snapshots", "info", "version", "plugins", "content", "leases"},
+    "ctr": None,
    "nerdctl": {"ps", "logs", "inspect", "info", "version", "images", "stats", "top", "events", "system", "namespace", "network", "volume"},
    "docker": {"ps", "logs", "inspect", "stats", "version", "info", "images", "top"},
    "df": None, "du": None, "free": None, "uptime": None, "uname": None, "hostname": None,