Bash:* wildcard permission not working in settings.local.json

[o2alexanderfedin]

Description

The "Bash:*" wildcard permission in .claude/settings.local.json does not allow all bash commands as expected. Even with this permission set, Claude still prompts for approval for individual bash commands.

Steps to Reproduce

1. Add "Bash:*" to the allow list in .claude/settings.local.json
2. Restart Claude
3. Try to run any bash command (e.g., ls, cp, etc.)
4. Claude still shows permission prompt

Expected Behavior

"Bash:*" should allow all bash commands without prompting for permission.

Actual Behavior

Permission prompts still appear for each bash command, requiring manual approval or selection of option 2 to allow commands for specific directories.

Configuration

{
  "permissions": {
    "allow": [
      "Bash:*",
      "Read",
      "Write",
      "Edit",
      "MultiEdit",
      "Glob",
      "Grep",
      "LS",
      "TodoRead",
      "TodoWrite",
      "WebFetch",
      "WebSearch",
      "NotebookRead",
      "NotebookEdit",
      "Task",
      "exit_plan_mode",
      "mcp__*"
    ],
    "deny": []
  }
}

Environment

• OS: macOS
• Claude Code installation via official app

Additional Context

This appears to be a bug in how Claude interprets the wildcard permission syntax. The mcp__* wildcard works correctly for MCP tools, but Bash:* does not work for bash commands.

[xshapira]

Description

The "Bash:*" wildcard permission in .claude/settings.local.json does not allow all bash commands as expected. Even with this permission set, Claude still prompts for approval for individual bash commands.

Steps to Reproduce

1. Add "Bash:*" to the allow list in .claude/settings.local.json
2. Restart Claude
3. Try to run any bash command (e.g., ls, cp, etc.)
4. Claude still shows permission prompt

Expected Behavior

"Bash:*" should allow all bash commands without prompting for permission.

Actual Behavior

Permission prompts still appear for each bash command, requiring manual approval or selection of option 2 to allow commands for specific directories.

Configuration

{
"permissions": {
"allow": [
"Bash:",
"Read",
"Write",
"Edit",
"MultiEdit",
"Glob",
"Grep",
"LS",
"TodoRead",
"TodoWrite",
"WebFetch",
"WebSearch",
"NotebookRead",
"NotebookEdit",
"Task",
"exit_plan_mode",
"mcp__"
],
"deny": []
}
}

Environment

• OS: macOS
• Claude Code installation via official app

Additional Context

This appears to be a bug in how Claude interprets the wildcard permission syntax. The mcp__* wildcard works correctly for MCP tools, but Bash:* does not work for bash commands.

Instead of:
Bash:*

You should try this:
Bash(*) or Bash(*:*)

[rboyce-ant]

That's not valid syntax. Claude Code doesn't actually support wildcards, the Bash(cmd:*) syntax is just for prefix matching. If you want to allow all Bash commands, simply add the full tool Bash as an allow rule.

[dreamerhyde]

Has this issue been resolved? Recently, using the * symbol still has no effect.

[github-actions]

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.