Open Claw 安全配置

# 基本审计openclaw security audit# 深度审计（包含实时探测）openclaw security audit --deep# 自动修复常见问题openclaw security audit --fix# JSON 格式输出openclaw security audit --json

- 将开放的群组策略改为允许列表- 恢复 `logging.redactSensitive: "tools"`- 收紧状态/配置/include-file 权限- Windows 上使用 ACL 重置而非 POSIX `chmod`

{gateway: {    mode: "local",    bind: "loopback",    auth: { mode: "token", token: "replace-with-long-random-token" },  },session: {dmScope: "per-channel-peer",  },tools: {profile: "messaging",    deny: ["group:automation", "group:runtime", "group:fs", "sessions_spawn", "sessions_send"],    fs: { workspaceOnly: true },exec: { security: "deny", ask: "always" },elevated: { enabled: false },  },channels: {whatsapp: { dmPolicy: "pairing", groups: { "*": { requireMention: true } } },  },}

{channels: {    whatsapp: {      dmPolicy: "pairing", // 需要配对      allowFrom: ["+15555550123"], // 可选：额外允许列表    },telegram: {dmPolicy: "allowlist",      allowFrom: ["user_id_1", "user_id_2"],    },feishu: {dmPolicy: "pairing",    },  },}

- 设置 `session.dmScope: "per-channel-peer"`（或 `"per-account-channel-peer"`）- 保持 `dmPolicy: "pairing"` 或严格的 allowlists

{channels: {whatsapp: {groups: {"*": { // 所有群组requireMention: true, // 必须 @ 机器人policy: "allowlist", // 或 allowlist        },      },    },  },}

{tools: {// 预设配置profile: "messaging", // minimal, messaging, coding, full// 显式拒绝的工具deny: ["group:automation", // 自动化工具组"group:runtime", // 运行时工具组"group:fs", // 文件系统工具组"sessions_spawn", // 禁止生成子代理"sessions_send", // 禁止发送消息到其他会话    ],// 文件系统限制fs: {workspaceOnly: true, // 仅限工作区    },// 执行限制exec: {security: "deny", // deny, sandbox, allowlist, fullask: "always", // always, off, on-miss    },// 提升工具（危险！）elevated: {enabled: false, // 默认禁用    },  },}

openclaw.json{  tools: {    exec: {      security: "allowlist", // deny, sandbox, allowlist, full      ask: "on-miss"           // always(每次询问), off(自动允许), on-miss(未匹配时询问)      ],    },  },}exec-approvals.json"agents": {"main": {"allowlist": [        {"id": "1ed855df-da23-4e44-8825-88f0db501b4d","pattern": "/usr/bin/ls*","source": "allow-always","lastUsedAt": 1776764389659,"lastUsedCommand": "ls -1 /bin | head -n 10","lastResolvedPath": "/usr/bin/ls"        }      ]    }  }

{gateway: {mode: "local", // local, relay, exposebind: "loopback", // loopback, 127.0.0.1, 0.0.0.0auth: {mode: "token", // none, token, password, trusted-proxy, devicetoken: "your-long-random-token",rateLimit: {windowMs: 60000, // 时间窗口（毫秒）max: 10, // 最大请求数      },    },tailscale: {mode: "off", // off, serve, funnel    },  },}