summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar Vincent43 <31109921+Vincent43@users.noreply.github.com>2018-03-31 09:17:40 +0000
committerLibravatar GitHub <noreply@github.com>2018-03-31 09:17:40 +0000
commit75208ac84b6b6ceb3736c3ec8b09b56a8047bb7b (patch)
tree45453b2755306eab6abac586754d7053e5c3ce6d
parentgimp fixup (diff)
parentAWS and GCP store credentials in local directories as part of project setup. (diff)
downloadfirejail-75208ac84b6b6ceb3736c3ec8b09b56a8047bb7b.tar.gz
firejail-75208ac84b6b6ceb3736c3ec8b09b56a8047bb7b.tar.zst
firejail-75208ac84b6b6ceb3736c3ec8b09b56a8047bb7b.zip
Merge pull request #1848 from jelford/cloud-providers
Add a section for cloud-providers to the default block-list
-rw-r--r--etc/disable-common.inc7
1 files changed, 7 insertions, 0 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index e5de0b61f..0f605b933 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -297,6 +297,13 @@ blacklist /etc/ssh
297blacklist /home/.ecryptfs 297blacklist /home/.ecryptfs
298blacklist /var/backup 298blacklist /var/backup
299 299
300# cloud provider configuration
301blacklist ${HOME}/.aws
302blacklist ${HOME}/.boto
303blacklist /etc/boto.cfg
304blacklist ${HOME}/.config/gcloud
305blacklist ${HOME}/.kube
306
300# system directories 307# system directories
301blacklist /sbin 308blacklist /sbin
302blacklist /usr/local/sbin 309blacklist /usr/local/sbin