| OLD | NEW |
| 1 # -*- coding: utf-8 -*- | 1 # -*- coding: utf-8 -*- |
| 2 # Copyright 2015 Google Inc. All Rights Reserved. | 2 # Copyright 2015 Google Inc. All Rights Reserved. |
| 3 # | 3 # |
| 4 # Licensed under the Apache License, Version 2.0 (the "License"); | 4 # Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 # you may not use this file except in compliance with the License. | 5 # you may not use this file except in compliance with the License. |
| 6 # You may obtain a copy of the License at | 6 # You may obtain a copy of the License at |
| 7 # | 7 # |
| 8 # http://www.apache.org/licenses/LICENSE-2.0 | 8 # http://www.apache.org/licenses/LICENSE-2.0 |
| 9 # | 9 # |
| 10 # Unless required by applicable law or agreed to in writing, software | 10 # Unless required by applicable law or agreed to in writing, software |
| (...skipping 169 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 180 | 180 |
| 181 <B>RECOMMENDED USER PRECAUTIONS</B> | 181 <B>RECOMMENDED USER PRECAUTIONS</B> |
| 182 The first and foremost precaution is: Never share your credentials. Each user | 182 The first and foremost precaution is: Never share your credentials. Each user |
| 183 should have distinct credentials. | 183 should have distinct credentials. |
| 184 | 184 |
| 185 If you run gsutil -D (to generate debugging output) it will include OAuth2 | 185 If you run gsutil -D (to generate debugging output) it will include OAuth2 |
| 186 refresh and access tokens in the output. Make sure to redact this information | 186 refresh and access tokens in the output. Make sure to redact this information |
| 187 before sending this debug output to anyone during troubleshooting/tech support | 187 before sending this debug output to anyone during troubleshooting/tech support |
| 188 interactions. | 188 interactions. |
| 189 | 189 |
| 190 If you run gsutil --trace-token (to send a trace directly to Google), |
| 191 sensitive information like OAuth2 tokens and the contents of any files |
| 192 accessed during the trace may be included in the content of the trace. |
| 193 |
| 190 The proxy configuration information in the .boto configuration is | 194 The proxy configuration information in the .boto configuration is |
| 191 security-sensitive, especially if your proxy setup requires user and | 195 security-sensitive, especially if your proxy setup requires user and |
| 192 password information. Even if your proxy setup doesn't require user and | 196 password information. Even if your proxy setup doesn't require user and |
| 193 password, the host and port number for your proxy is often considered | 197 password, the host and port number for your proxy is often considered |
| 194 security-sensitive. Protect access to your .boto configuration file. | 198 security-sensitive. Protect access to your .boto configuration file. |
| 195 | 199 |
| 196 If you are using gsutil from a production environment (e.g., via a cron job | 200 If you are using gsutil from a production environment (e.g., via a cron job |
| 197 running on a host in your data center), use service account credentials rather | 201 running on a host in your data center), use service account credentials rather |
| 198 than individual user account credentials. These credentials were designed for | 202 than individual user account credentials. These credentials were designed for |
| 199 such use and, for example, protect you from losing access when an employee | 203 such use and, for example, protect you from losing access when an employee |
| 200 leaves your company. | 204 leaves your company. |
| 201 """) | 205 """) |
| 202 | 206 |
| 203 | 207 |
| 204 class CommandOptions(HelpProvider): | 208 class CommandOptions(HelpProvider): |
| 205 """Additional help about security and privacy considerations using gsutil.""" | 209 """Additional help about security and privacy considerations using gsutil.""" |
| 206 | 210 |
| 207 # Help specification. See help_provider.py for documentation. | 211 # Help specification. See help_provider.py for documentation. |
| 208 help_spec = HelpProvider.HelpSpec( | 212 help_spec = HelpProvider.HelpSpec( |
| 209 help_name='security', | 213 help_name='security', |
| 210 help_name_aliases=['encryption', 'protection', 'privacy', 'proxies', | 214 help_name_aliases=['encryption', 'protection', 'privacy', 'proxies', |
| 211 'proxy'], | 215 'proxy'], |
| 212 help_type='additional_help', | 216 help_type='additional_help', |
| 213 help_one_line_summary='Security and Privacy Considerations', | 217 help_one_line_summary='Security and Privacy Considerations', |
| 214 help_text=_DETAILED_HELP_TEXT, | 218 help_text=_DETAILED_HELP_TEXT, |
| 215 subcommand_help_text={}, | 219 subcommand_help_text={}, |
| 216 ) | 220 ) |
| OLD | NEW |