On Sun, Nov 30, 2014 at 08:29:27PM -0500, Rahul Sundaram wrote:
> Hi
> 
> On Sun, Nov 30, 2014 at 1:36 PM, Lars Seipel  wrote:
> >
> >
> > There's also OpenNebula (^ONE_) and Vmware (^VI_) doing the same. Seems
> > to be pretty common with virt and cloud stuff. Apart from that I can't
> > think of anything else right now.
> 
> 
> Rackspace, DigitalOcean,  Google Computing Engine etc have API info
> potentially exported in the environment as well.  This is going to be quite
> tedious to filter out but just in case you want to blacklist them,  you
> want to blacklist the following
> 
> NOVA_*
> DO_*
> APPID_*
OK, so far we have:

OS_*
AWS_*
ONE_*
VI_*
NOVA_*
DO_*
APPID_*

I'd also add *SECRET* and *PASSWORD*.

Let's filter on that. It should covert 95% of cases.

Zbyszek
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Reply via email to