b948b19748
Collecting private keys and certificates is objectionable.
This update adds /etc/kubernetes/pki to the collect
exclude list so that its private keys and certificate
files are not collected.
This update then enhances collect's mask passwords
plugin to pull in the public certificate files which
do not pose a security risk and are useful during debug.
Test Plan:
PASS: Verify only the .crt files from the newly excluded
dir are collected.
Change-Id: Ia9e3e132d10fd31486b92742fb17147b36aa98c9
Closes-Bug: 1952676
Signed-off-by: Eric MacDonald <eric.macdonald@windriver.com>
42 lines
631 B
Plaintext
42 lines
631 B
Plaintext
/etc/postgresql
|
|
/etc/alternatives
|
|
/etc/terminfo
|
|
/etc/tempest
|
|
/etc/security
|
|
/etc/yum
|
|
/etc/collect
|
|
/etc/collect.d
|
|
/etc/logrotate.d
|
|
/etc/logrotate*
|
|
/etc/keystone
|
|
/etc/pam.d
|
|
/etc/environment
|
|
/etc/sudoers.d
|
|
/etc/sudoers
|
|
/etc/passwd
|
|
/etc/passwd-
|
|
/etc/shadow
|
|
/etc/shadow-
|
|
/etc/gshadow
|
|
/etc/gshadow-
|
|
/etc/group
|
|
/etc/group-
|
|
/etc/ssh
|
|
/etc/X11
|
|
/etc/bluetooth
|
|
/etc/chatscripts
|
|
/etc/cron*
|
|
/etc/rc5.d
|
|
/etc/rc4.d
|
|
/etc/rc1.d
|
|
/etc/rc2.d
|
|
/etc/bash_completion.d
|
|
/etc/pm
|
|
/etc/systemd/system/*.mount
|
|
/etc/systemd/system/*.socket
|
|
/etc/systemd/system/lvm2-lvmetad.service
|
|
/etc/systemd/system/ctrl-alt-del.target
|
|
/etc/ssl
|
|
/etc/mtc/tmp
|
|
/etc/kubernetes/pki
|