github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

AWS and GCP store credentials in local directories as part of project setup.

Browse source 
Configuration for cloud providers is sensitive information; it should be
in the default block list. I didn't see profiles for gcloud or awscli,
so haven't added any exclusions.

boto and kubectl are not provider-specific, but also store credentials for
whichever platforms they happen to be being used with.
This commit is contained in:
James Elford 2018-03-31 09:10:37 +01:00
parent 2c12be7f55
commit b470715f39
1 changed files with 7 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
etc/disable-common.inc
View file

@ -297,6 +297,13 @@ blacklist /etc/ssh
blacklist /home/.ecryptfs
blacklist /var/backup
# cloud provider configuration
blacklist ${HOME}/.aws
blacklist ${HOME}/.boto
blacklist /etc/boto.cfg
blacklist ${HOME}/.config/gcloud
blacklist ${HOME}/.kube
# system directories
blacklist /sbin
blacklist /usr/local/sbin