ease sinsitive dir rules (#47)

goodwithtech · Aug 15, 2019 · 25d0a13 · 25d0a13
1 parent 67fd713
commit 25d0a13
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/CHECKPOINT.md b/CHECKPOINT.md
@@ -123,7 +123,7 @@ A volume mount makes weak points. This depends on mounting volumes.
 
 Currently, `Dockle` checks following directories:
 
- - `/boot`, `/dev`, `/etc`, `/lib`, `/proc`, `/sys`,  `/usr`
+ - `/dev`, `/proc`, `/sys`
 
 `dockle` only checks `VOLUME` statements, since we can't check `docker run -v /lib:/lib ...`.
 

diff --git a/pkg/assessor/manifest/manifest.go b/pkg/assessor/manifest/manifest.go
@@ -16,7 +16,7 @@ import (
 
 type ManifestAssessor struct{}
 
-var sensitiveDirs = map[string]struct{}{"/boot": {}, "/dev": {}, "/etc": {}, "/lib": {}, "/proc": {}, "/sys": {}, "/usr": {}}
+var sensitiveDirs = map[string]struct{}{"/sys": {}, "/dev": {}, "/proc": {}}
 var suspiciousEnvKey = []string{"PASSWD", "PASSWORD", "SECRET", "KEY", "ACCESS"}
 var acceptanceEnvKey = map[string]struct{}{"GPG_KEY": {}, "GPG_KEYS": {}}