Parcourir la source

concierge-permaudit: add rules for cloud-related tools (AWS, Docker, Google Cloud SDK)

guillaume il y a 7 ans
Parent
commit
17d803b270
1 fichiers modifiés avec 6 ajouts et 1 suppressions
  1. 6 1
      src/concierge-permaudit

+ 6 - 1
src/concierge-permaudit

@@ -37,6 +37,11 @@ readPatterns = [
   '%APPDATA%/Subversion/auth/',
   '~/.hgrc',
   '~/.netrc',
+  '~/.aws/credentials', # https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/credentials.html
+  '~/.docker/config.json', # https://docs.docker.com/engine/reference/commandline/login/
+  '~/.config/gcloud/credentials.db', # https://cloud.google.com/storage/docs/gsutil/addlhelp/CredentialTypesSupportingVariousUseCases
+  '~/.config/gcloud/legacy_credentials/*/*.json', # https://cloud.google.com/sdk/crypto
+  '~/.config/gcloud/legacy_credentials/*/*.p12', # https://cloud.google.com/sdk/crypto
   '~/.config/filezilla/filezilla.xml',
   '~/.config/filezilla/sitemanager.xml',
   '~/.mozilla/firefox/*/key3.db', # mozilla firefox
@@ -70,7 +75,7 @@ readPatterns = [
   '/etc/letsencrypt/accounts/*/directory/*/private_key.json',
   '/etc/letsencrypt/keys/*.pem',
   '/etc/cups/ssl/*.key',
-  '/etc/unbound/*.key'
+  '/etc/unbound/*.key',
   ]
 
 writePatterns = [