089a43f5e8
Add GLIBC_TUNABLES, MAVEN_OPTS, SBT_OPTS, GRADLE_OPTS, ANT_OPTS, DOTNET_ADDITIONAL_DEPS to blockedKeys and GRADLE_USER_HOME to blockedOverrideKeys in the host exec security policy. Closes #22681
64 lines
1.1 KiB
JSON
64 lines
1.1 KiB
JSON
{
|
|
"blockedKeys": [
|
|
"NODE_OPTIONS",
|
|
"NODE_PATH",
|
|
"PYTHONHOME",
|
|
"PYTHONPATH",
|
|
"PERL5LIB",
|
|
"PERL5OPT",
|
|
"RUBYLIB",
|
|
"RUBYOPT",
|
|
"BASH_ENV",
|
|
"ENV",
|
|
"GIT_EXTERNAL_DIFF",
|
|
"GIT_EXEC_PATH",
|
|
"SHELL",
|
|
"SHELLOPTS",
|
|
"PS4",
|
|
"GCONV_PATH",
|
|
"IFS",
|
|
"SSLKEYLOGFILE",
|
|
"JAVA_TOOL_OPTIONS",
|
|
"_JAVA_OPTIONS",
|
|
"JDK_JAVA_OPTIONS",
|
|
"PYTHONBREAKPOINT",
|
|
"DOTNET_STARTUP_HOOKS",
|
|
"DOTNET_ADDITIONAL_DEPS",
|
|
"GLIBC_TUNABLES",
|
|
"MAVEN_OPTS",
|
|
"SBT_OPTS",
|
|
"GRADLE_OPTS",
|
|
"ANT_OPTS"
|
|
],
|
|
"blockedOverrideKeys": [
|
|
"HOME",
|
|
"GRADLE_USER_HOME",
|
|
"ZDOTDIR",
|
|
"GIT_SSH_COMMAND",
|
|
"GIT_SSH",
|
|
"GIT_PROXY_COMMAND",
|
|
"GIT_ASKPASS",
|
|
"SSH_ASKPASS",
|
|
"LESSOPEN",
|
|
"LESSCLOSE",
|
|
"PAGER",
|
|
"MANPAGER",
|
|
"GIT_PAGER",
|
|
"EDITOR",
|
|
"VISUAL",
|
|
"FCEDIT",
|
|
"SUDO_EDITOR",
|
|
"PROMPT_COMMAND",
|
|
"HISTFILE",
|
|
"PERL5DB",
|
|
"PERL5DBCMD",
|
|
"OPENSSL_CONF",
|
|
"OPENSSL_ENGINES",
|
|
"PYTHONSTARTUP",
|
|
"WGETRC",
|
|
"CURL_HOME"
|
|
],
|
|
"blockedOverridePrefixes": ["GIT_CONFIG_", "NPM_CONFIG_"],
|
|
"blockedPrefixes": ["DYLD_", "LD_", "BASH_FUNC_"]
|
|
}
|