diff options
| author |  rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-08-12 17:25:47 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2021-08-12 17:25:47 +0000 |
| commit | ca8603c09d8ec0ac05e5853485707fe9f96499f2 (patch) | |
| tree | 471d82126371961f7b95c15482369062d8c4e68d /etc/inc/disable-common.inc | |
| parent | Create disable-X11.inc (#4462) (diff) | |
| download | firejail-ca8603c09d8ec0ac05e5853485707fe9f96499f2.tar.gz firejail-ca8603c09d8ec0ac05e5853485707fe9f96499f2.tar.zst firejail-ca8603c09d8ec0ac05e5853485707fe9f96499f2.zip | |
Move disable-passwordmgr.inc into disable-common.inc/disable-programs.inc (#4461)
See #4454
Diffstat (limited to 'etc/inc/disable-common.inc')
| -rw-r--r-- | etc/inc/disable-common.inc | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc index 4efdaba2d..a9dd4921f 100644 --- a/etc/inc/disable-common.inc +++ b/etc/inc/disable-common.inc | |||
| @@ -431,6 +431,18 @@ blacklist ${HOME}/.ssh | |||
| 431 | blacklist ${HOME}/.vaults | 431 | blacklist ${HOME}/.vaults |
| 432 | blacklist /var/backup | 432 | blacklist /var/backup |
| 433 | 433 | ||
| 434 | # Remove environment variables with auth tokens. | ||
| 435 | # Note however that the sandbox might still have access to the | ||
| 436 | # files where these variables are set. | ||
| 437 | rmenv GH_TOKEN | ||
| 438 | rmenv GITHUB_TOKEN | ||
| 439 | rmenv GH_ENTERPRISE_TOKEN | ||
| 440 | rmenv GITHUB_ENTERPRISE_TOKEN | ||
| 441 | rmenv CARGO_REGISTRY_TOKEN | ||
| 442 | rmenv RESTIC_KEY_HINT | ||
| 443 | rmenv RESTIC_PASSWORD_COMMAND | ||
| 444 | rmenv RESTIC_PASSWORD_FILE | ||
| 445 | |||
| 434 | # cloud provider configuration | 446 | # cloud provider configuration |
| 435 | blacklist ${HOME}/.aws | 447 | blacklist ${HOME}/.aws |
| 436 | blacklist ${HOME}/.boto | 448 | blacklist ${HOME}/.boto |