OLD | NEW |
1 # -*- coding: utf-8 -*- | 1 # -*- coding: utf-8 -*- |
2 # Copyright 2015 Google Inc. All Rights Reserved. | 2 # Copyright 2015 Google Inc. All Rights Reserved. |
3 # | 3 # |
4 # Licensed under the Apache License, Version 2.0 (the "License"); | 4 # Licensed under the Apache License, Version 2.0 (the "License"); |
5 # you may not use this file except in compliance with the License. | 5 # you may not use this file except in compliance with the License. |
6 # You may obtain a copy of the License at | 6 # You may obtain a copy of the License at |
7 # | 7 # |
8 # http://www.apache.org/licenses/LICENSE-2.0 | 8 # http://www.apache.org/licenses/LICENSE-2.0 |
9 # | 9 # |
10 # Unless required by applicable law or agreed to in writing, software | 10 # Unless required by applicable law or agreed to in writing, software |
(...skipping 169 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
180 | 180 |
181 <B>RECOMMENDED USER PRECAUTIONS</B> | 181 <B>RECOMMENDED USER PRECAUTIONS</B> |
182 The first and foremost precaution is: Never share your credentials. Each user | 182 The first and foremost precaution is: Never share your credentials. Each user |
183 should have distinct credentials. | 183 should have distinct credentials. |
184 | 184 |
185 If you run gsutil -D (to generate debugging output) it will include OAuth2 | 185 If you run gsutil -D (to generate debugging output) it will include OAuth2 |
186 refresh and access tokens in the output. Make sure to redact this information | 186 refresh and access tokens in the output. Make sure to redact this information |
187 before sending this debug output to anyone during troubleshooting/tech support | 187 before sending this debug output to anyone during troubleshooting/tech support |
188 interactions. | 188 interactions. |
189 | 189 |
| 190 If you run gsutil --trace-token (to send a trace directly to Google), |
| 191 sensitive information like OAuth2 tokens and the contents of any files |
| 192 accessed during the trace may be included in the content of the trace. |
| 193 |
190 The proxy configuration information in the .boto configuration is | 194 The proxy configuration information in the .boto configuration is |
191 security-sensitive, especially if your proxy setup requires user and | 195 security-sensitive, especially if your proxy setup requires user and |
192 password information. Even if your proxy setup doesn't require user and | 196 password information. Even if your proxy setup doesn't require user and |
193 password, the host and port number for your proxy is often considered | 197 password, the host and port number for your proxy is often considered |
194 security-sensitive. Protect access to your .boto configuration file. | 198 security-sensitive. Protect access to your .boto configuration file. |
195 | 199 |
196 If you are using gsutil from a production environment (e.g., via a cron job | 200 If you are using gsutil from a production environment (e.g., via a cron job |
197 running on a host in your data center), use service account credentials rather | 201 running on a host in your data center), use service account credentials rather |
198 than individual user account credentials. These credentials were designed for | 202 than individual user account credentials. These credentials were designed for |
199 such use and, for example, protect you from losing access when an employee | 203 such use and, for example, protect you from losing access when an employee |
200 leaves your company. | 204 leaves your company. |
201 """) | 205 """) |
202 | 206 |
203 | 207 |
204 class CommandOptions(HelpProvider): | 208 class CommandOptions(HelpProvider): |
205 """Additional help about security and privacy considerations using gsutil.""" | 209 """Additional help about security and privacy considerations using gsutil.""" |
206 | 210 |
207 # Help specification. See help_provider.py for documentation. | 211 # Help specification. See help_provider.py for documentation. |
208 help_spec = HelpProvider.HelpSpec( | 212 help_spec = HelpProvider.HelpSpec( |
209 help_name='security', | 213 help_name='security', |
210 help_name_aliases=['encryption', 'protection', 'privacy', 'proxies', | 214 help_name_aliases=['encryption', 'protection', 'privacy', 'proxies', |
211 'proxy'], | 215 'proxy'], |
212 help_type='additional_help', | 216 help_type='additional_help', |
213 help_one_line_summary='Security and Privacy Considerations', | 217 help_one_line_summary='Security and Privacy Considerations', |
214 help_text=_DETAILED_HELP_TEXT, | 218 help_text=_DETAILED_HELP_TEXT, |
215 subcommand_help_text={}, | 219 subcommand_help_text={}, |
216 ) | 220 ) |
OLD | NEW |