diff options
Diffstat (limited to 'etc/inc/disable-common.inc')
-rw-r--r-- | etc/inc/disable-common.inc | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc index 4efdaba2d..a9dd4921f 100644 --- a/etc/inc/disable-common.inc +++ b/etc/inc/disable-common.inc | |||
@@ -431,6 +431,18 @@ blacklist ${HOME}/.ssh | |||
431 | blacklist ${HOME}/.vaults | 431 | blacklist ${HOME}/.vaults |
432 | blacklist /var/backup | 432 | blacklist /var/backup |
433 | 433 | ||
434 | # Remove environment variables with auth tokens. | ||
435 | # Note however that the sandbox might still have access to the | ||
436 | # files where these variables are set. | ||
437 | rmenv GH_TOKEN | ||
438 | rmenv GITHUB_TOKEN | ||
439 | rmenv GH_ENTERPRISE_TOKEN | ||
440 | rmenv GITHUB_ENTERPRISE_TOKEN | ||
441 | rmenv CARGO_REGISTRY_TOKEN | ||
442 | rmenv RESTIC_KEY_HINT | ||
443 | rmenv RESTIC_PASSWORD_COMMAND | ||
444 | rmenv RESTIC_PASSWORD_FILE | ||
445 | |||
434 | # cloud provider configuration | 446 | # cloud provider configuration |
435 | blacklist ${HOME}/.aws | 447 | blacklist ${HOME}/.aws |
436 | blacklist ${HOME}/.boto | 448 | blacklist ${HOME}/.boto |