Auto-allow can kill processes

[Daniel_Coimbra]

Auto-allow config has ‘File-Deletion Protection’ and ‘External-File Protection’ but no protection against killing processes.

I tested auto-allow to spawn a Streamlit server, and the agent killed a Streamlit server running under root (I had created it with nohup setsid) because the agent wanted to use the same port (for no good reason).

I cannot use Auto-allow until this security gap is filled. So I’m signal-boosting this by creating this post.

Furthermore: Perhaps Auto-allow could involve a custom user instructions MD to finely control what is (not) auto-allowed.

Cheers,
Dan

[Colin]

Hey @tsenkov

@Daniel_Coimbra

Furthermore: Perhaps Auto-allow could involve a custom user instructions MD to finely control what is (not) auto-allowed.

You already can!

Auto-review Run Mode

You can do that with a .cursor/permissions.json file in your repo! { "autoRun": { "allow_instructions": [ "Allow read-only shell commands that inspect files, directories, git state, logs, process status, or command output without modifying files or external state.", "Allow read-only MCP, WebFetch, and WebSearch calls that retrieve or inspect data without creating, updating, deleting, posting, triggering, or deploying anything." ], "block_instructions": [ "Block …

[Daniel_Coimbra]

Thanks, Colin.

The Cursor Team always does a great job!

Cheers