DSH 默认开启了"安全沙箱"(限制软件权限),请教如何解除限制 #697

Workspace Write 改成 Full Access

注:本条评论原文因编码问题曾显示为乱码,已重建为可读版(2026年09月07日)。

可以(在 Full Access 模式下实测过,两种做法):

1. 走 workspace-write + 细粒度规则:dsh-permission-rules(声明式规则)按需放行——目录/命令/网络都能配,默认 deny 兜底,与 Full Access 可叠加:dsh plugin --profile <p> add dsh-permission-rules
2. 需要更大权限:在授权窗口里选择 danger-full-access(等同于 Full Access)。

建议:别直接「全关」,用「默认拒绝 + 显式放行」;权限收紧后先跑通一次完整任务流,确认无误再上线。

Friendly nudge: my answer covers the three sandbox modes and the safe way to widen permissions per command instead of globally. If a specific tool is still blocked, name it and I'll give the exact flag - and marking the answer as the solution helps others with the same question.