]> git.pld-linux.org Git - packages/etckeeper.git/blob - update-ignore.patch
more possible secrets
[packages/etckeeper.git] / update-ignore.patch
1 --- etckeeper-1.10/update-ignore.d/01update-ignore      2013-11-14 15:33:56.904100141 +0200
2 +++ etckeeper-1.10/update-ignore.d/01update-ignore      2014-02-03 11:58:25.578526063 +0000
3 @@ -103,11 +103,10 @@
4         
5         comment "old versions of files"
6         ignore "*.old"
7 -       # Not currently ignored as admins tend to rely on these files.
8 -       #ignore "passwd-"
9 -       #ignore "group-"
10 -       #ignore "shadow-"
11 -       #ignore "gshadow-"
12 +       ignore "passwd-"
13 +       ignore "group-"
14 +       ignore "shadow-"
15 +       ignore "gshadow-"
16         nl
17  
18         comment "mount(8) records system state here, no need to store these"
19 @@ -146,11 +145,78 @@
20         ignore "cups/subscriptions.conf.O"
21         ignore "fake-hwclock.data"
22         nl
23 +
24 +       comment "PLD Linux addons"
25 +       comment "ca-certificates: generated content"
26 +       ignore "certs/ca-certificates.crt"
27 +       ignore "openssl/certs/*"
28 +
29 +       comment "bash-completion"
30 +       ignore "bash_completion.d/*"
31 +       ignore "bash_completion"
32 +
33 +       comment "openldap"
34 +       ignore "ldap.secret"
35 +
36 +       comment "postfix"
37 +       ignore "mail/*.db"
38 +
39 +       comment "rc-scripts binary locales"
40 +       ignore "sysconfig/locale/*/LC_MESSAGES/rc-scripts.mo"
41 +
42 +       comment "rc-scripts"
43 +       ignore "rc.d/init.d/*"
44 +       ignore "rc.d/rc?.d/[SK]*"
45 +       ignore "rc.d/rc.init"
46 +       ignore "rc.d/rc.local"
47 +       ignore "rc.d/rc.shutdown"
48 +       ignore "rc.d/rc.sysinit"
49 +
50 +       comment "zsh compiled"
51 +       ignore "*.zwc"
52 +
53 +       comment "sshd keys"
54 +       ignore "ssh/ssh_*_key*"
55 +
56 +       comment "bacula passwords"
57 +       ignore "bacula/*-password"
58 +
59 +       comment "chef secret"
60 +       ignore "chef/encrypted_data_bag_secret"
61 +
62 +       comment "visudo tmp"
63 +       ignore "sudoers.tmp"
64 +
65 +       comment "secrets"
66 +       ignore "crypttab"
67 +       ignore "shadow"
68 +
69 +       comment "certificates"
70 +       ignore "httpd/ssl/"
71 +
72 +       comment "ntp keys"
73 +       ignore "ntp/keys"
74 +
75 +       comment "ssh-blacklists"
76 +       ignore "ssh/blacklist.DSA-1024"
77 +       ignore "ssh/blacklist.DSA-2048"
78 +       ignore "ssh/blacklist.RSA-1024"
79 +       ignore "ssh/blacklist.RSA-2048"
80 +       ignore "ssh/blacklist.RSA-4096"
81 +
82 +       comment "CVS version conflicts"
83 +       ignore ".#*.*.*"
84 +
85 +       comment "vigr backups"
86 +       ignore "group.vigr*"
87 +       ignore "passwd.vipw*"
88         
89         comment "editor temp files"
90         ignore "*~"
91         ignore ".*.sw?"
92         ignore ".sw?"
93 +       ignore ".bak"
94 +       ignore ".BAK"
95         ignore "#*#"
96         ignore DEADJOE
97  
This page took 0.059405 seconds and 3 git commands to generate.