dtoro 53823595de fix: add ethtool, lsmod, lspci, modinfo, dkms to read-only command allowlist ...

Read-only diagnostic commands ethtool, lsmod, lspci, modinfo, and dkms
were missing from the readOnlyLeadPattern in the command classifier,
causing compound diagnostic commands (e.g. 'uname -r && ethtool -i eno1
&& lsmod | grep r8169') to be misclassified as config_mutation instead
of read_only. This forced operator approval for simple hardware/driver
inspection during the 2026-08-12 hubris NIC cutover session.

Added regression test with the exact compound command from that session.

2026-08-12 13:27:33 +02:00

14 KiB

Raw Blame History

View Raw