[packages/etckeeper] do not ignore crucial system configuration data - this made etckeeper pointless, nobody excludes pri
gotar
gotar at pld-linux.org
Sun Jul 31 01:01:13 CEST 2016
commit 83b309717135571f5add81c6883e4a5505239526
Author: Tomasz Pala <gotar at pld-linux.org>
Date: Sun Jul 31 00:48:39 2016 +0200
do not ignore crucial system configuration data - this made etckeeper
pointless, nobody excludes private data from backups; need for securing
VCS repo is obvious and mentioned in every documentation out there
update-ignore.patch | 50 +++++++++++++++++---------------------------------
1 file changed, 17 insertions(+), 33 deletions(-)
---
diff --git a/update-ignore.patch b/update-ignore.patch
index cbeb292..42cc71d 100644
--- a/update-ignore.patch
+++ b/update-ignore.patch
@@ -1,21 +1,5 @@
--- etckeeper-1.10/update-ignore.d/01update-ignore 2013-11-14 15:33:56.904100141 +0200
+++ etckeeper-1.10/update-ignore.d/01update-ignore 2014-02-03 11:58:25.578526063 +0000
-@@ -103,11 +103,10 @@
-
- comment "old versions of files"
- ignore "*.old"
-- # Not currently ignored as admins tend to rely on these files.
-- #ignore "passwd-"
-- #ignore "group-"
-- #ignore "shadow-"
-- #ignore "gshadow-"
-+ ignore "passwd-"
-+ ignore "group-"
-+ ignore "shadow-"
-+ ignore "gshadow-"
- nl
-
- comment "mount(8) records system state here, no need to store these"
@@ -146,11 +145,80 @@
ignore "cups/subscriptions.conf.O"
ignore "fake-hwclock.data"
@@ -24,15 +8,15 @@
+ comment "PLD Linux addons"
+ comment "ca-certificates: generated content"
+ ignore "certs/ca-certificates.crt"
-+ ignore "openssl/certs/*"
++ #ignore "openssl/certs/*"
+ ignore "udev/hwdb*"
+
+ comment "bash-completion"
+ ignore "bash_completion.d/*"
+ ignore "bash_completion"
+
-+ comment "openldap"
-+ ignore "ldap.secret"
++ #comment "openldap"
++ #ignore "ldap.secret"
+
+ comment "postfix"
+ ignore "mail/*.db"
@@ -51,28 +35,28 @@
+ comment "zsh compiled"
+ ignore "*.zwc"
+
-+ comment "sshd keys"
-+ ignore "ssh/ssh_*_key*"
++ #comment "sshd keys"
++ #ignore "ssh/ssh_*_key*"
+
-+ comment "bacula passwords"
-+ ignore "bacula/*-password"
++ #comment "bacula passwords"
++ #ignore "bacula/*-password"
+
-+ comment "chef secret"
-+ ignore "chef/encrypted_data_bag_secret"
++ #comment "chef secret"
++ #ignore "chef/encrypted_data_bag_secret"
+
+ comment "visudo tmp"
+ ignore "sudoers.tmp"
+
-+ comment "secrets"
-+ ignore "crypttab"
-+ ignore "shadow"
-+ ignore "passwd"
++ #comment "secrets"
++ #ignore "crypttab"
++ #ignore "shadow"
++ #ignore "passwd"
+
-+ comment "certificates"
-+ ignore "httpd/ssl/"
++ #comment "certificates"
++ #ignore "httpd/ssl/"
+
-+ comment "ntp keys"
-+ ignore "ntp/keys"
++ #comment "ntp keys"
++ #ignore "ntp/keys"
+
+ comment "ssh-blacklists"
+ ignore "ssh/blacklist.DSA-1024"
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/etckeeper.git/commitdiff/b149b6f0a7527e7201b7a6e97a1e9df521503728
More information about the pld-cvs-commit
mailing list