From: Frank Brehm Date: Fri, 27 Sep 2019 23:11:16 +0000 (+0200) Subject: committing changes in /etc made by "apt dist-upgrade -y" X-Git-Url: https://git.uhu-banane.net/?a=commitdiff_plain;h=160575155303fab782bc78dbb3c37f90e94669c8;p=config%2Fsarah%2Fetc.git committing changes in /etc made by "apt dist-upgrade -y" Package changes: -ack 2.14-5 all +ack 2.24-1 all -acl 2.2.52-3+b1 amd64 -acpi 1.7-1+b1 amd64 +acl 2.2.53-4 amd64 +acpi 1.7-1.1 amd64 -acpid 1:2.0.28-1+b1 amd64 -adduser 3.115 all -altermime 0.3.10-8 amd64 -amavisd-new 1:2.10.1-4 all -apache2-bin 2.4.25-3+deb9u8 amd64 -apt 1.4.9 amd64 +acpid 1:2.0.31-1 amd64 +adduser 3.118 all +altermime 0.3.10-9 amd64 +amavisd-new 1:2.11.0-6.1 all +apache2-bin 2.4.38-3+deb10u1 amd64 +apt 1.8.2 amd64 -apt-listchanges 3.10 all -apt-transport-https 1.4.9 amd64 -apt-utils 1.4.9 amd64 -apticron 1.1.61 all -aptitude 0.8.7-1 amd64 -aptitude-common 0.8.7-1 all -arj 3.10.22-15 amd64 -at 3.1.20-3 amd64 -base-files 9.9+deb9u11 amd64 -base-passwd 3.5.43 amd64 -bash 4.4-5 amd64 -bash-completion 1:2.1-4.3 all -bc 1.06.95-9+b3 amd64 -bind9 1:9.10.3.dfsg.P4-12.3+deb9u5 amd64 -bind9-host 1:9.10.3.dfsg.P4-12.3+deb9u5 amd64 -bind9utils 1:9.10.3.dfsg.P4-12.3+deb9u5 amd64 -binutils 2.28-5 amd64 -bsdmainutils 9.0.12+nmu1 amd64 -bsdutils 1:2.29.2-1+deb9u1 amd64 -build-essential 12.3 amd64 -busybox 1:1.22.0-19+b3 amd64 -bzip2 1.0.6-8.1 amd64 -ca-certificates 20161130+nmu1+deb9u1 all -ca-certificates-java 20170929~deb9u3 all -cabextract 1.6-1+b1 amd64 -chrony 3.0-4+deb9u2 amd64 -clamav-base 0.101.4+dfsg-0+deb9u1 all -clamav-daemon 0.101.4+dfsg-0+deb9u1 amd64 -clamav-freshclam 0.101.4+dfsg-0+deb9u1 amd64 -colordiff 1.0.16-1 all -console-common 0.7.89 all -console-data 2:1.12-5 all -console-setup 1.164 all -console-setup-linux 1.164 all -coreutils 8.26-3 amd64 -cpio 2.11+dfsg-6 amd64 -cpp 4:6.3.0-4 amd64 +apt-listchanges 3.19 all +apt-transport-https 1.8.2 all +apt-utils 1.8.2 amd64 +apticron 1.2.1 all +aptitude 0.8.11-7 amd64 +aptitude-common 0.8.11-7 all +arj 3.10.22-18 amd64 +at 3.1.23-1 amd64 +base-files 10.3+deb10u1 amd64 +base-passwd 3.5.46 amd64 +bash 5.0-4 amd64 +bash-completion 1:2.8-6 all +bc 1.07.1-2+b1 amd64 +bind9 1:9.11.5.P4+dfsg-5.1 amd64 +bind9-host 1:9.11.5.P4+dfsg-5.1 amd64 +bind9utils 1:9.11.5.P4+dfsg-5.1 amd64 +binutils 2.31.1-16 amd64 +binutils-common 2.31.1-16 amd64 +binutils-x86-64-linux-gnu 2.31.1-16 amd64 +bsdmainutils 11.1.2+b1 amd64 +bsdutils 1:2.33.1-0.1 amd64 +build-essential 12.6 amd64 +busybox 1:1.30.1-4 amd64 +bzip2 1.0.6-9.2~deb10u1 amd64 +ca-certificates 20190110 all +ca-certificates-java 20190405 all +cabextract 1.9-1 amd64 +chrony 3.4-4 amd64 +clamav-base 0.101.4+dfsg-0+deb10u1 all +clamav-daemon 0.101.4+dfsg-0+deb10u1 amd64 +clamav-freshclam 0.101.4+dfsg-0+deb10u1 amd64 +colordiff 1.0.18-1 all +console-common 0.7.90 all +console-data 2:1.12-6 all +console-setup 1.193~deb10u1 all +console-setup-linux 1.193~deb10u1 all +coreutils 8.30-3 amd64 +cpio 2.12+dfsg-9 amd64 +cpp 4:8.3.0-1 amd64 -cron 3.0pl1-128+deb9u1 amd64 -curl 7.52.1-5+deb9u9 amd64 -dash 0.5.8-2.4 amd64 -dbconfig-common 2.0.8 all -dbconfig-mysql 2.0.8 all -dbus 1.10.28-0+deb9u1 amd64 -dc 1.06.95-9+b3 amd64 -dctrl-tools 2.24-2+b1 amd64 +cpp-8 8.3.0-6 amd64 +cron 3.0pl1-134 amd64 +curl 7.64.0-4 amd64 +dash 0.5.10.2-5 amd64 +dbconfig-common 2.0.11+deb10u1 all +dbconfig-mysql 2.0.11+deb10u1 all +dbus 1.12.16-1 amd64 +dc 1.07.1-2+b1 amd64 +dctrl-tools 2.24-3 amd64 -debconf 1.5.61 all -debconf-i18n 1.5.61 all -debconf-utils 1.5.61 all -debian-archive-keyring 2017.5+deb9u1 all -debian-keyring 2017.05.28 all -debianutils 4.8.1.1 amd64 -debugedit 4.12.0.2+dfsg1-2 amd64 -dh-python 2.20170125 all -dialog 1.3-20160828-2 amd64 -dictionaries-common 1.27.2 all -diffutils 1:3.5-3 amd64 -dirmngr 2.1.18-8~deb9u4 amd64 -discover 2.1.2-7.1+deb9u1 amd64 +debconf 1.5.71 all +debconf-i18n 1.5.71 all +debconf-utils 1.5.71 all +debian-archive-keyring 2019.1 all +debian-keyring 2019.02.25 all +debianutils 4.8.6.1 amd64 +debugedit 4.14.2.1+dfsg1-1 amd64 +dh-python 3.20190308 all +dialog 1.3-20190211-1 amd64 +dictionaries-common 1.28.1 all +diffutils 1:3.7-3 amd64 +dirmngr 2.2.12-1+deb10u1 amd64 +discover 2.1.2-8 amd64 -distro-info-data 0.36 all -dmeventd 2:1.02.137-2 amd64 -dmidecode 3.0-4 amd64 -dmsetup 2:1.02.137-2 amd64 -dns-root-data 2019031302~deb9u1 all -dnsutils 1:9.10.3.dfsg.P4-12.3+deb9u5 amd64 -dovecot-core 1:2.2.27-3+deb9u5 amd64 -dovecot-imapd 1:2.2.27-3+deb9u5 amd64 -dovecot-lmtpd 1:2.2.27-3+deb9u5 amd64 -dovecot-managesieved 1:2.2.27-3+deb9u5 amd64 -dovecot-mysql 1:2.2.27-3+deb9u5 amd64 -dovecot-pop3d 1:2.2.27-3+deb9u5 amd64 -dovecot-sieve 1:2.2.27-3+deb9u5 amd64 -dpkg 1.18.25 amd64 -dpkg-dev 1.18.25 all -e2fslibs 1.43.4-2 amd64 -e2fsprogs 1.43.4-2 amd64 +distro-info-data 0.41 all +dmeventd 2:1.02.155-3 amd64 +dmidecode 3.2-1 amd64 +dmsetup 2:1.02.155-3 amd64 +dns-root-data 2019031302 all +dnsutils 1:9.11.5.P4+dfsg-5.1 amd64 +dovecot-core 1:2.3.4.1-5+deb10u1 amd64 +dovecot-imapd 1:2.3.4.1-5+deb10u1 amd64 +dovecot-lmtpd 1:2.3.4.1-5+deb10u1 amd64 +dovecot-managesieved 1:2.3.4.1-5+deb10u1 amd64 +dovecot-mysql 1:2.3.4.1-5+deb10u1 amd64 +dovecot-pop3d 1:2.3.4.1-5+deb10u1 amd64 +dovecot-sieve 1:2.3.4.1-5+deb10u1 amd64 +dpkg 1.19.7 amd64 +dpkg-dev 1.19.7 all +e2fslibs 1.44.5-1+deb10u2 amd64 +e2fsprogs 1.44.5-1+deb10u2 amd64 -emacsen-common 2.0.8 all -etckeeper 1.18.5-1 all -fail2ban 0.9.6-2 all -figlet 2.2.5-2+b1 amd64 -file 1:5.30-1+deb9u2 amd64 -findutils 4.6.0+git+20161106-2 amd64 -flake8 3.2.1-1 all -fontconfig-config 2.11.0-6.7 all +emacsen-common 3.0.4 all +etckeeper 1.18.10-1 all +fail2ban 0.10.2-2.1 all +fdisk 2.33.1-0.1 amd64 +figlet 2.2.5-3 amd64 +file 1:5.35-4 amd64 +findutils 4.6.0+git+20190209-2 amd64 +flake8 3.6.0-1 all +fontconfig-config 2.13.1-2 all -fonts-ipafont-gothic 00303-16 all -fonts-ipafont-mincho 00303-16 all +fonts-ipafont-gothic 00303-18 all +fonts-ipafont-mincho 00303-18 all -fortunes-de 0.33-1 all +fortunes-de 0.34-1 all -ftp 0.17-34 amd64 -g++ 4:6.3.0-4 amd64 +ftp 0.17-34.1 amd64 +g++ 4:8.3.0-1 amd64 -galera-3 25.3.19-2 amd64 -gawk 1:4.1.4+dfsg-1 amd64 -gcc 4:6.3.0-4 amd64 +g++-8 8.3.0-6 amd64 +galera-3 25.3.25-2 amd64 +gawk 1:4.2.1+dfsg-1 amd64 +gcc 4:8.3.0-1 amd64 -geoip-database 20170512-1 all -gettext 0.19.8.1-2+deb9u1 amd64 -gettext-base 0.19.8.1-2+deb9u1 amd64 -git 1:2.11.0-3+deb9u4 amd64 -git-email 1:2.11.0-3+deb9u4 all -git-man 1:2.11.0-3+deb9u4 all -gnupg 2.1.18-8~deb9u4 amd64 -gnupg-agent 2.1.18-8~deb9u4 amd64 -gpgv 2.1.18-8~deb9u4 amd64 -grep 2.27-2 amd64 -groff-base 1.22.3-9 amd64 -grub-common 2.02~beta3-5+deb9u2 amd64 -grub-pc 2.02~beta3-5+deb9u2 amd64 -grub-pc-bin 2.02~beta3-5+deb9u2 amd64 -grub2-common 2.02~beta3-5+deb9u2 amd64 -guile-2.0-libs 2.0.13+1-4 amd64 -gzip 1.6-5+b1 amd64 -haveged 1.9.1-5+deb9u1 amd64 +gcc-7-base 7.4.0-6 amd64 +gcc-8 8.3.0-6 amd64 +gcc-8-base 8.3.0-6 amd64 +geoip-database 20181108-1 all +gettext 0.19.8.1-9 amd64 +gettext-base 0.19.8.1-9 amd64 +git 1:2.20.1-2 amd64 +git-email 1:2.20.1-2 all +git-man 1:2.20.1-2 all +gnupg 2.2.12-1+deb10u1 all +gnupg-agent 2.2.12-1+deb10u1 all +gnupg-l10n 2.2.12-1+deb10u1 all +gnupg-utils 2.2.12-1+deb10u1 amd64 +gpg 2.2.12-1+deb10u1 amd64 +gpg-agent 2.2.12-1+deb10u1 amd64 +gpg-wks-client 2.2.12-1+deb10u1 amd64 +gpg-wks-server 2.2.12-1+deb10u1 amd64 +gpgconf 2.2.12-1+deb10u1 amd64 +gpgsm 2.2.12-1+deb10u1 amd64 +gpgv 2.2.12-1+deb10u1 amd64 +grep 3.3-1 amd64 +groff-base 1.22.4-3 amd64 +grub-common 2.02+dfsg1-20 amd64 +grub-pc 2.02+dfsg1-20 amd64 +grub-pc-bin 2.02+dfsg1-20 amd64 +grub2-common 2.02+dfsg1-20 amd64 +guile-2.0-libs 2.0.13+1-5.1 amd64 +guile-2.2-libs 2.2.4+1-2 amd64 +gzip 1.9-3 amd64 +haveged 1.9.1-7 amd64 -hostname 3.18+b1 amd64 -htop 2.0.2-1 amd64 -iamerican 3.4.00-5 all -ibritish 3.4.00-5 all -icinga2 2.6.0-2+deb9u1 amd64 -icinga2-bin 2.6.0-2+deb9u1 amd64 -icinga2-common 2.6.0-2+deb9u1 all -ienglish-common 3.4.00-5 all -ifupdown 0.8.19 amd64 -init 1.48 amd64 -init-system-helpers 1.48 all -initramfs-tools 0.130 all -initramfs-tools-core 0.130 all -initscripts 2.88dsf-59.9 amd64 -insserv 1.14.0-5.4+b1 amd64 -install-info 6.3.0.dfsg.1-1+b2 amd64 -installation-report 2.62 all -iproute2 4.9.0-1+deb9u1 amd64 -iptables 1.6.0+snapshot20161117-6 amd64 -iptables-persistent 1.0.4+nmu2 all -iputils-ping 3:20161105-1 amd64 -isc-dhcp-client 4.3.5-3+deb9u1 amd64 -isc-dhcp-common 4.3.5-3+deb9u1 amd64 -iso-codes 3.75-1 all -isoquery 3.2.1-2 amd64 -ispell 3.4.00-5 amd64 -java-common 0.58+deb9u1 all -kbd 2.0.3-2+b1 amd64 -keyboard-configuration 1.164 all -klibc-utils 2.0.4-9 amd64 -kmod 23-2 amd64 -krb5-locales 1.15-1+deb9u1 all -laptop-detect 0.13.8 amd64 -less 481-2.1 amd64 -lftp 4.7.4-1 amd64 -libacl1 2.2.52-3+b1 amd64 -libaio1 0.3.110-3 amd64 +hostname 3.21 amd64 +htop 2.2.0-1+b1 amd64 +iamerican 3.4.00-6 all +ibritish 3.4.00-6 all +icinga2 2.10.3-2 amd64 +icinga2-bin 2.10.3-2 amd64 +icinga2-common 2.10.3-2 all +ienglish-common 3.4.00-6 all +ifupdown 0.8.35 amd64 +init 1.56+nmu1 amd64 +init-system-helpers 1.56+nmu1 all +initramfs-tools 0.133+deb10u1 all +initramfs-tools-core 0.133+deb10u1 all +initscripts 2.93-8 amd64 +insserv 1.18.0-2 amd64 +install-info 6.5.0.dfsg.1-4+b1 amd64 +installation-report 2.71 all +iproute2 4.20.0-2 amd64 +iptables 1.8.2-4 amd64 +iptables-persistent 1.0.11 all +iputils-ping 3:20180629-2 amd64 +isc-dhcp-client 4.4.1-2 amd64 +isc-dhcp-common 4.4.1-2 amd64 +iso-codes 4.2-1 all +isoquery 3.2.3-1 amd64 +ispell 3.4.00-6+b1 amd64 +java-common 0.71 all +kbd 2.0.4-4 amd64 +keyboard-configuration 1.193~deb10u1 all +klibc-utils 2.0.6-1 amd64 +kmod 26-1 amd64 +krb5-locales 1.17-3 all +laptop-detect 0.16 all +less 487-0.1+b1 amd64 +lftp 4.8.4-2 amd64 +libacl1 2.2.53-4 amd64 +libaio1 0.3.112-3 amd64 -libapparmor1 2.11.0-3+deb9u2 amd64 -libapr1 1.5.2-5 amd64 -libaprutil1 1.5.4-3 amd64 -libaprutil1-dbd-sqlite3 1.5.4-3 amd64 -libaprutil1-ldap 1.5.4-3 amd64 -libapt-inst2.0 1.4.9 amd64 -libapt-pkg5.0 1.4.9 amd64 -libarchive-zip-perl 1.59-1+deb9u1 all -libarchive13 3.2.2-2+deb9u1 amd64 +libapache2-mod-php7.3 7.3.9-1~deb10u1 amd64 +libapparmor1 2.13.2-10 amd64 +libapr1 1.6.5-1+b1 amd64 +libaprutil1 1.6.1-4 amd64 +libaprutil1-dbd-sqlite3 1.6.1-4 amd64 +libaprutil1-ldap 1.6.1-4 amd64 +libapt-inst2.0 1.8.2 amd64 +libapt-pkg5.0 1.8.2 amd64 +libarchive-zip-perl 1.64-1 all +libarchive13 3.3.3-4 amd64 +libargon2-1 0~20171227-0.2 amd64 -libassuan0 2.4.3-2 amd64 -libatomic1 6.3.0-18+deb9u1 amd64 -libattr1 1:2.4.47-2+b2 amd64 -libaudit-common 1:2.6.7-2 all -libaudit1 1:2.6.7-2 amd64 -libavahi-client3 0.6.32-2 amd64 -libavahi-common-data 0.6.32-2 amd64 -libavahi-common3 0.6.32-2 amd64 -libberkeleydb-perl 0.55-1+b2 amd64 +libasan5 8.3.0-6 amd64 +libassuan0 2.5.2-1 amd64 +libatomic1 8.3.0-6 amd64 +libattr1 1:2.4.48-4 amd64 +libaudit-common 1:2.8.4-3 all +libaudit1 1:2.8.4-3 amd64 +libavahi-client3 0.7-4+b1 amd64 +libavahi-common-data 0.7-4+b1 amd64 +libavahi-common3 0.7-4+b1 amd64 +libberkeleydb-perl 0.55-2 amd64 -libblkid1 2.29.2-1+deb9u1 amd64 +libbind9-161 1:9.11.5.P4+dfsg-5.1 amd64 +libbinutils 2.31.1-16 amd64 +libblkid1 2.33.1-0.1 amd64 +libboost-atomic1.67.0 1.67.0-13 amd64 +libboost-chrono1.67.0 1.67.0-13 amd64 +libboost-date-time1.67.0 1.67.0-13 amd64 +libboost-iostreams1.67.0 1.67.0-13 amd64 +libboost-program-options1.67.0 1.67.0-13 amd64 +libboost-regex1.67.0 1.67.0-13 amd64 +libboost-system1.67.0 1.67.0-13 amd64 -libbsd0 0.8.3-1 amd64 -libbz2-1.0 1.0.6-8.1 amd64 -libc-ares2 1.12.0-1+deb9u1 amd64 -libc-bin 2.24-11+deb9u4 amd64 -libc-dev-bin 2.24-11+deb9u4 amd64 -libc-l10n 2.24-11+deb9u4 all -libc6 2.24-11+deb9u4 amd64 -libc6-dev 2.24-11+deb9u4 amd64 -libcap-ng0 0.7.7-3+b1 amd64 -libcap2 1:2.25-1 amd64 -libcap2-bin 1:2.25-1 amd64 -libcc1-0 6.3.0-18+deb9u1 amd64 -libcgi-fast-perl 1:2.12-1 all -libcgi-pm-perl 4.35-1 all -libcilkrts5 6.3.0-18+deb9u1 amd64 -libclamav9 0.101.4+dfsg-0+deb9u1 amd64 -libcomerr2 1.43.4-2 amd64 -libconfig-inifiles-perl 2.94-1 all +libboost-thread1.67.0 1.67.0-13 amd64 +libbrotli1 1.0.7-2 amd64 +libbsd0 0.9.1-2 amd64 +libbz2-1.0 1.0.6-9.2~deb10u1 amd64 +libc-ares2 1.14.0-1 amd64 +libc-bin 2.28-10 amd64 +libc-dev-bin 2.28-10 amd64 +libc-l10n 2.28-10 all +libc6 2.28-10 amd64 +libc6-dev 2.28-10 amd64 +libcap-ng0 0.7.9-2 amd64 +libcap2 1:2.25-2 amd64 +libcap2-bin 1:2.25-2 amd64 +libcc1-0 8.3.0-6 amd64 +libcgi-fast-perl 1:2.13-1 all +libcgi-pm-perl 4.40-1 all +libcilkrts5 7.4.0-6 amd64 +libclamav9 0.101.4+dfsg-0+deb10u1 amd64 +libcom-err2 1.44.5-1+deb10u2 amd64 +libcomerr2 1.44.5-1+deb10u2 amd64 +libconfig-inifiles-perl 3.000001-1 all -libconvert-uulib-perl 1:1.4~dfsg-1+b5 amd64 -libcroco3 0.6.11-3 amd64 -libcrypt-openssl-bignum-perl 0.07-2 amd64 -libcrypt-openssl-rsa-perl 0.28-5 amd64 +libconvert-uulib-perl 1:1.5~dfsg-1+b1 amd64 +libcroco3 0.6.12-3 amd64 +libcrypt-openssl-bignum-perl 0.09-1+b1 amd64 +libcrypt-openssl-random-perl 0.15-1+b1 amd64 +libcrypt-openssl-rsa-perl 0.31-1+b1 amd64 +libcryptsetup12 2:2.1.0-5+deb10u2 amd64 -libcups2 2.2.1-8+deb9u4 amd64 -libcurl3 7.52.1-5+deb9u9 amd64 -libcurl3-gnutls 7.52.1-5+deb9u9 amd64 -libcwidget3v5 0.5.17-4+b1 amd64 -libdb5.3 5.3.28-12+deb9u1 amd64 -libdbd-mysql-perl 4.041-2 amd64 -libdbi-perl 1.636-1+b1 amd64 -libdbi1 0.9.0-4+deb9u1 amd64 -libdbus-1-3 1.10.28-0+deb9u1 amd64 -libdebconfclient0 0.227 amd64 -libdevmapper-event1.02.1 2:1.02.137-2 amd64 -libdevmapper1.02.1 2:1.02.137-2 amd64 -libdigest-hmac-perl 1.03+dfsg-1 all -libdiscover2 2.1.2-7.1+deb9u1 amd64 +libcups2 2.2.10-6+deb10u1 amd64 +libcurl3-gnutls 7.64.0-4 amd64 +libcurl4 7.64.0-4 amd64 +libcwidget3v5 0.5.17-11 amd64 +libdb5.3 5.3.28+dfsg1-0.5 amd64 +libdbd-mysql-perl 4.050-2 amd64 +libdbi-perl 1.642-1+b1 amd64 +libdbi1 0.9.0-5 amd64 +libdbus-1-3 1.12.16-1 amd64 +libdebconfclient0 0.249 amd64 +libdevmapper-event1.02.1 2:1.02.155-3 amd64 +libdevmapper1.02.1 2:1.02.155-3 amd64 +libdigest-hmac-perl 1.03+dfsg-2 all +libdiscover2 2.1.2-8 amd64 +libdns-export1104 1:9.11.5.P4+dfsg-5.1 amd64 +libdns1104 1:9.11.5.P4+dfsg-5.1 amd64 -libdpkg-perl 1.18.25 all -libedit2 3.1-20160903-3 amd64 -libelf1 0.168-1 amd64 +libdpkg-perl 1.19.7 all +libdw1 0.176-1.1 amd64 +libedit2 3.1-20181209-1 amd64 +libefiboot1 37-2 amd64 +libefivar1 37-2 amd64 +libelf1 0.176-1.1 amd64 -liberror-perl 0.17024-1 all -libestr0 0.1.10-2 amd64 -libexpat1 2.2.0-2+deb9u3 amd64 -libexttextcat-2.0-0 3.4.4-2+b1 amd64 -libexttextcat-data 3.4.4-2 all -libfastjson4 0.99.4-1 amd64 -libfcgi-perl 0.78-2 amd64 -libfdisk1 2.29.2-1+deb9u1 amd64 -libffi6 3.2.1-6 amd64 +liberror-perl 0.17027-2 all +libestr0 0.1.10-2.1 amd64 +libevent-2.1-6 2.1.8-stable-4 amd64 +libexpat1 2.2.6-2+deb10u1 amd64 +libext2fs2 1.44.5-1+deb10u2 amd64 +libexttextcat-2.0-0 3.4.5-1 amd64 +libexttextcat-data 3.4.5-1 all +libfastjson4 0.99.8-2 amd64 +libfcgi-perl 0.78-2+b3 amd64 +libfdisk1 2.33.1-0.1 amd64 +libffi6 3.2.1-9 amd64 -libfile-next-perl 1.16-1 all -libfontconfig1 2.11.0-6.7+b1 amd64 -libfreetype6 2.6.3-3.2 amd64 -libfribidi0 0.19.7-1+deb9u1 amd64 -libfuse2 2.9.7-1+deb9u2 amd64 -libgc1c2 1:7.4.2-8 amd64 +libfile-next-perl 1.16-2 all +libfl2 2.6.4-6.2 amd64 +libfontconfig1 2.13.1-2 amd64 +libfreetype6 2.9.1-3 amd64 +libfribidi0 1.0.5-3.1 amd64 +libfstrm0 0.4.0-1 amd64 +libfuse2 2.9.9-1 amd64 +libgc1c2 1:7.6.4-0.4 amd64 -libgcc1 1:6.3.0-18+deb9u1 amd64 -libgcrypt20 1.7.6-2+deb9u3 amd64 -libgd3 2.2.4-2+deb9u5 amd64 +libgcc-8-dev 8.3.0-6 amd64 +libgcc1 1:8.3.0-6 amd64 +libgcrypt20 1.8.4-5 amd64 +libgd3 2.2.5-5.2 amd64 +libgdbm-compat4 1.18.1-4 amd64 -libgeoip1 1.6.9-4 amd64 -libglib2.0-0 2.50.3-2+deb9u1 amd64 -libgmp10 2:6.1.2+dfsg-1 amd64 -libgnutls-openssl27 3.5.8-5+deb9u4 amd64 -libgnutls30 3.5.8-5+deb9u4 amd64 -libgomp1 6.3.0-18+deb9u1 amd64 -libgpg-error0 1.26-2 amd64 -libgpm2 1.20.4-6.2+b1 amd64 +libgdbm6 1.18.1-4 amd64 +libgeoip1 1.6.12-1 amd64 +libglib2.0-0 2.58.3-2+deb10u1 amd64 +libgmp10 2:6.1.2+dfsg-4 amd64 +libgnutls-openssl27 3.6.7-4 amd64 +libgnutls30 3.6.7-4 amd64 +libgomp1 8.3.0-6 amd64 +libgpg-error0 1.35-1 amd64 +libgpm2 1.20.7-5 amd64 -libgssapi-krb5-2 1.15-1+deb9u1 amd64 -libhavege1 1.9.1-5+deb9u1 amd64 -libhogweed4 3.3-1+b2 amd64 -libhtml-parser-perl 3.72-3 amd64 +libgssapi-krb5-2 1.17-3 amd64 +libhavege1 1.9.1-7 amd64 +libhogweed4 3.4.1-1 amd64 +libhtml-parser-perl 3.72-3+b3 amd64 -libhtml-template-perl 2.95-2 all -libhtml-tree-perl 5.03-2 all -libhttp-cookies-perl 6.01-1 all +libhtml-template-perl 2.97-1 all +libhtml-tree-perl 5.07-2 all +libhttp-cookies-perl 6.04-1 all -libhttp-message-perl 6.11-1 all -libhttp-negotiate-perl 6.00-2 all +libhttp-message-perl 6.18-1 all +libhttp-negotiate-perl 6.01-1 all -libidn11 1.33-1 amd64 -libidn2-0 0.16-1+deb9u1 amd64 +libicu63 63.1-6 amd64 +libidn11 1.33-2.2 amd64 +libidn2-0 2.0.5-1 amd64 -libintl-xs-perl 1.26-2+b1 amd64 +libintl-xs-perl 1.26-2+b4 amd64 -libio-socket-ssl-perl 2.044-1 all -libio-stringy-perl 2.111-2 all -libip4tc0 1.6.0+snapshot20161117-6 amd64 -libip6tc0 1.6.0+snapshot20161117-6 amd64 -libiptc0 1.6.0+snapshot20161117-6 amd64 +libio-socket-ssl-perl 2.060-3 all +libio-stringy-perl 2.111-3 all +libip4tc0 1.8.2-4 amd64 +libip6tc0 1.8.2-4 amd64 +libiptc0 1.8.2-4 amd64 +libirs161 1:9.11.5.P4+dfsg-5.1 amd64 +libisc-export1100 1:9.11.5.P4+dfsg-5.1 amd64 +libisc1100 1:9.11.5.P4+dfsg-5.1 amd64 +libisccc161 1:9.11.5.P4+dfsg-5.1 amd64 +libisccfg163 1:9.11.5.P4+dfsg-5.1 amd64 -libitm1 6.3.0-18+deb9u1 amd64 -libjansson4 2.9-1 amd64 +libisl19 0.20-2 amd64 +libitm1 8.3.0-6 amd64 +libjansson4 2.12-1 amd64 -libjpeg62-turbo 1:1.5.1-2 amd64 -libjs-jquery 3.1.1-2+deb9u1 all -libjs-sphinxdoc 1.4.9-2 all -libjs-underscore 1.8.3~dfsg-1 all -libjson-c3 0.12.1-1.1 amd64 -libjson-glib-1.0-0 1.2.6-1 amd64 -libjson-glib-1.0-common 1.2.6-1 all -libk5crypto3 1.15-1+deb9u1 amd64 -libkeyutils1 1.5.9-9 amd64 -libklibc 2.0.4-9 amd64 -libkmod2 23-2 amd64 -libkrb5-3 1.15-1+deb9u1 amd64 -libkrb5support0 1.15-1+deb9u1 amd64 +libjpeg62-turbo 1:1.5.2-2+b1 amd64 +libjs-jquery 3.3.1~dfsg-3 all +libjs-sphinxdoc 1.8.4-1 all +libjs-underscore 1.9.1~dfsg-1 all +libjson-c3 0.12.1+ds-2 amd64 +libjson-glib-1.0-0 1.4.4-2 amd64 +libjson-glib-1.0-common 1.4.4-2 all +libk5crypto3 1.17-3 amd64 +libkeyutils1 1.6-6 amd64 +libklibc 2.0.6-1 amd64 +libkmod2 26-1 amd64 +libkrb5-3 1.17-3 amd64 +libkrb5support0 1.17-3 amd64 -liblcms2-2 2.8-4+deb9u1 amd64 -libldap-2.4-2 2.4.44+dfsg-5+deb9u3 amd64 -libldap-common 2.4.44+dfsg-5+deb9u3 all -libllvm3.8 1:3.8.1-24 amd64 -liblocale-gettext-perl 1.07-3+b1 amd64 +liblcms2-2 2.9-3 amd64 +libldap-2.4-2 2.4.47+dfsg-3+deb10u1 amd64 +libldap-common 2.4.47+dfsg-3+deb10u1 all +liblmdb0 0.9.22-1 amd64 +liblocale-gettext-perl 1.07-3+b4 amd64 -liblognorm5 2.0.1-1.1+b1 amd64 -liblsan0 6.3.0-18+deb9u1 amd64 -libltdl7 2.4.6-2 amd64 +liblognorm5 2.0.5-1 amd64 +liblsan0 8.3.0-6 amd64 +libltdl7 2.4.6-9 amd64 +liblua5.3-0 5.3.3-1.1 amd64 +liblvm2cmd2.03 2.03.02-3 amd64 -liblwp-protocol-https-perl 6.06-2 all +liblwp-protocol-https-perl 6.07-2 all -liblz4-1 0.0~r131-2+b1 amd64 -liblzma5 5.2.2-1.2+b1 amd64 -liblzo2-2 2.08-1.2+b2 amd64 -libmagic-mgc 1:5.30-1+deb9u2 amd64 -libmagic1 1:5.30-1+deb9u2 amd64 -libmail-dkim-perl 0.40-1 all +liblwres161 1:9.11.5.P4+dfsg-5.1 amd64 +liblz4-1 1.8.3-1 amd64 +liblzma5 5.2.4-1 amd64 +liblzo2-2 2.10-0.1 amd64 +libmagic-mgc 1:5.35-4 amd64 +libmagic1 1:5.35-4 amd64 +libmail-dkim-perl 0.54-1 all -libmailutils5 1:3.1.1-1 amd64 -libmariadbclient18 10.1.41-0+deb9u1 amd64 +libmailutils5 1:3.5-3 amd64 +libmariadb3 1:10.3.17-0+deb10u1 amd64 -libmaxminddb0 1.2.0-1+b1 amd64 -libmcrypt4 2.5.8-3.3 amd64 -libmemcached11 1.0.18-4.1 amd64 -libmemcachedutil2 1.0.18-4.1 amd64 -libmhash2 0.9.9.9-7 amd64 -libmilter1.0.1 8.15.2-8 amd64 -libmime-tools-perl 5.508-1 all +libmaxminddb0 1.3.2-1 amd64 +libmcrypt4 2.5.8-3.4 amd64 +libmemcached11 1.0.18-4.2 amd64 +libmemcachedutil2 1.0.18-4.2 amd64 +libmhash2 0.9.9.9-7+b1 amd64 +libmilter1.0.1 8.15.2-14~deb10u1 amd64 +libmime-tools-perl 5.509-1 all -libmodule-scandeps-perl 1.23-1 all -libmount1 2.29.2-1+deb9u1 amd64 -libmpc3 1.0.3-1+b2 amd64 -libmpdec2 2.4.2-1 amd64 +libmodule-scandeps-perl 1.27-1 all +libmount1 2.33.1-0.1 amd64 +libmpc3 1.1.0-1 amd64 +libmpdec2 2.4.2-2 amd64 -libmpx2 6.3.0-18+deb9u1 amd64 -libmspack0 0.5-1+deb9u3 amd64 -libncurses5 6.0+20161126-1+deb9u2 amd64 -libncursesw5 6.0+20161126-1+deb9u2 amd64 -libnet-cidr-perl 0.18-1 all -libnet-dns-perl 1.07-1 all -libnet-http-perl 6.12-1 all -libnet-ip-perl 1.26-1 all -libnet-libidn-perl 0.12.ds-2+b3 amd64 -libnet-server-perl 2.008-3 all +libmpfr6 4.0.2-1 amd64 +libmpx2 8.3.0-6 amd64 +libmspack0 0.10.1-1 amd64 +libncurses5 6.1+20181013-2+deb10u1 amd64 +libncurses6 6.1+20181013-2+deb10u1 amd64 +libncursesw5 6.1+20181013-2+deb10u1 amd64 +libncursesw6 6.1+20181013-2+deb10u1 amd64 +libnet-cidr-perl 0.19-1 all +libnet-dns-perl 1.19-1 all +libnet-http-perl 6.18-1 all +libnet-ip-perl 1.26-2 all +libnet-libidn-perl 0.12.ds-3+b1 amd64 +libnet-server-perl 2.009-1 all -libnet-ssleay-perl 1.80-1 amd64 -libnetaddr-ip-perl 4.079+dfsg-1+b1 amd64 -libnetfilter-acct1 1.0.2-1.1 amd64 -libnetfilter-conntrack3 1.0.6-2 amd64 -libnetfilter-log1 1.0.1-1.1 amd64 -libnettle6 3.3-1+b2 amd64 -libnewt0.52 0.52.19-1+b1 amd64 -libnfnetlink0 1.0.1-3 amd64 -libnghttp2-14 1.18.1-1+deb9u1 amd64 -libnginx-mod-http-auth-pam 1.10.3-1+deb9u3 amd64 -libnginx-mod-http-dav-ext 1.10.3-1+deb9u3 amd64 -libnginx-mod-http-echo 1.10.3-1+deb9u3 amd64 -libnginx-mod-http-geoip 1.10.3-1+deb9u3 amd64 -libnginx-mod-http-image-filter 1.10.3-1+deb9u3 amd64 -libnginx-mod-http-subs-filter 1.10.3-1+deb9u3 amd64 -libnginx-mod-http-upstream-fair 1.10.3-1+deb9u3 amd64 -libnginx-mod-http-xslt-filter 1.10.3-1+deb9u3 amd64 -libnginx-mod-mail 1.10.3-1+deb9u3 amd64 -libnginx-mod-stream 1.10.3-1+deb9u3 amd64 -libnl-3-200 3.2.27-2 amd64 -libnl-genl-3-200 3.2.27-2 amd64 -libnpth0 1.3-1 amd64 -libnspr4 2:4.12-6 amd64 -libnss3 2:3.26.2-1.1+deb9u1 amd64 -libntlm0 1.4-8 amd64 -libopendbx1 1.4.6-11+b1 amd64 -libopendbx1-mysql 1.4.6-11+b1 amd64 -libopendbx1-pgsql 1.4.6-11+b1 amd64 -libopendbx1-sqlite3 1.4.6-11+b1 amd64 -libopendkim11 2.11.0~alpha-10+deb9u1 amd64 -libp11-kit0 0.23.3-2 amd64 -libpam-modules 1.1.8-3.6 amd64 -libpam-modules-bin 1.1.8-3.6 amd64 -libpam-runtime 1.1.8-3.6 all -libpam-systemd 232-25+deb9u12 amd64 -libpam0g 1.1.8-3.6 amd64 -libparted2 3.2-17 amd64 -libpcap0.8 1.8.1-3 amd64 +libnet-ssleay-perl 1.85-2+b1 amd64 +libnetaddr-ip-perl 4.079+dfsg-1+b3 amd64 +libnetfilter-acct1 1.0.3-2 amd64 +libnetfilter-conntrack3 1.0.7-1 amd64 +libnetfilter-log1 1.0.1-1.1+b1 amd64 +libnettle6 3.4.1-1 amd64 +libnewt0.52 0.52.20-8 amd64 +libnfnetlink0 1.0.1-3+b1 amd64 +libnftnl11 1.1.2-2 amd64 +libnghttp2-14 1.36.0-2+deb10u1 amd64 +libnginx-mod-http-auth-pam 1.14.2-2+deb10u1 amd64 +libnginx-mod-http-dav-ext 1.14.2-2+deb10u1 amd64 +libnginx-mod-http-echo 1.14.2-2+deb10u1 amd64 +libnginx-mod-http-geoip 1.14.2-2+deb10u1 amd64 +libnginx-mod-http-image-filter 1.14.2-2+deb10u1 amd64 +libnginx-mod-http-subs-filter 1.14.2-2+deb10u1 amd64 +libnginx-mod-http-upstream-fair 1.14.2-2+deb10u1 amd64 +libnginx-mod-http-xslt-filter 1.14.2-2+deb10u1 amd64 +libnginx-mod-mail 1.14.2-2+deb10u1 amd64 +libnginx-mod-stream 1.14.2-2+deb10u1 amd64 +libnl-3-200 3.4.0-1 amd64 +libnl-genl-3-200 3.4.0-1 amd64 +libnorm1 1.5.8+dfsg2-1 amd64 +libnpth0 1.6-1 amd64 +libnspr4 2:4.20-1 amd64 +libnss3 2:3.42.1-1+deb10u1 amd64 +libntlm0 1.5-1 amd64 +libopendbx1 1.4.6-13+b1 amd64 +libopendbx1-mysql 1.4.6-13+b1 amd64 +libopendbx1-pgsql 1.4.6-13+b1 amd64 +libopendbx1-sqlite3 1.4.6-13+b1 amd64 +libopendkim11 2.11.0~alpha-12 amd64 +libp11-kit0 0.23.15-2 amd64 +libpam-modules 1.3.1-5 amd64 +libpam-modules-bin 1.3.1-5 amd64 +libpam-runtime 1.3.1-5 all +libpam-systemd 241-7~deb10u1 amd64 +libpam0g 1.3.1-5 amd64 +libparted2 3.2-25 amd64 +libpcap0.8 1.8.1-6 amd64 -libpcre3 2:8.39-3 amd64 -libpcsclite1 1.8.20-1 amd64 +libpcre2-8-0 10.32-5 amd64 +libpcre3 2:8.39-12 amd64 +libpcsclite1 1.8.24-1 amd64 -libpgm-5.2-0 5.2.122~dfsg-2 amd64 -libpipeline1 1.4.1-2 amd64 -libpng16-16 1.6.28-1+deb9u1 amd64 -libpopt0 1.16-10+b2 amd64 -libpq5 9.6.15-0+deb9u1 amd64 -libproc-processtable-perl 0.53-2 amd64 +libperl5.28 5.28.1-6 amd64 +libpgm-5.2-0 5.2.122~dfsg-3 amd64 +libpipeline1 1.5.1-2 amd64 +libpng16-16 1.6.36-6 amd64 +libpopt0 1.16-12 amd64 +libpq5 11.5-1+deb10u1 amd64 +libproc-processtable-perl 0.56-1 amd64 -libpsl5 0.17.0-3 amd64 -libpython-stdlib 2.7.13-2 amd64 -libpython2.7 2.7.13-2+deb9u3 amd64 -libpython2.7-minimal 2.7.13-2+deb9u3 amd64 -libpython2.7-stdlib 2.7.13-2+deb9u3 amd64 -libpython3-stdlib 3.5.3-1 amd64 +libprocps7 2:3.3.15-2 amd64 +libprotobuf-c1 1.3.1-1+b1 amd64 +libpsl5 0.20.2-2 amd64 +libpython-stdlib 2.7.16-1 amd64 +libpython2-stdlib 2.7.16-1 amd64 +libpython2.7 2.7.16-2 amd64 +libpython2.7-minimal 2.7.16-2 amd64 +libpython2.7-stdlib 2.7.16-2 amd64 +libpython3-stdlib 3.7.3-1 amd64 -libquadmath0 6.3.0-18+deb9u1 amd64 -librbl1 2.11.0~alpha-10+deb9u1 amd64 -libreadline5 5.2+dfsg-3+b1 amd64 -libreadline7 7.0-3 amd64 +libpython3.7-minimal 3.7.3-2 amd64 +libpython3.7-stdlib 3.7.3-2 amd64 +libquadmath0 8.3.0-6 amd64 +librbl1 2.11.0~alpha-12 amd64 +libreadline5 5.2+dfsg-3+b13 amd64 +libreadline7 7.0-5 amd64 +librpm8 4.14.2.1+dfsg1-1 amd64 +librpmbuild8 4.14.2.1+dfsg1-1 amd64 +librpmio8 4.14.2.1+dfsg1-1 amd64 -librtmp1 2.4+20151223.gitfa8646d.1-1+b1 amd64 +librpmsign8 4.14.2.1+dfsg1-1 amd64 +librtmp1 2.4+20151223.gitfa8646d.1-2 amd64 -libsasl2-2 2.1.27~101-g0780600+dfsg-3 amd64 -libsasl2-modules-db 2.1.27~101-g0780600+dfsg-3 amd64 -libsbc1 1.3-2 amd64 -libseccomp2 2.3.1-2.1+deb9u1 amd64 -libselinux1 2.6-3+b3 amd64 -libsemanage-common 2.6-2 all -libsemanage1 2.6-2 amd64 +libruby2.5 2.5.5-3 amd64 +libsasl2-2 2.1.27+dfsg-1 amd64 +libsasl2-modules-db 2.1.27+dfsg-1 amd64 +libsbc1 1.4-1 amd64 +libseccomp2 2.3.3-4 amd64 +libselinux1 2.8-1+b1 amd64 +libsemanage-common 2.8-2 all +libsemanage1 2.8-2 amd64 +libsensors-config 1:3.5.0-3 all -libsepol1 2.6-2 amd64 -libsigc++-2.0-0v5 2.10.0-1 amd64 -libsigsegv2 2.10-5 amd64 -libslang2 2.3.1-5 amd64 -libsmartcols1 2.29.2-1+deb9u1 amd64 -libsmi2ldbl 0.4.8+dfsg2-15 amd64 -libsnappy1v5 1.1.3-3 amd64 -libsocket6-perl 0.27-1+b1 amd64 +libsensors5 1:3.5.0-3 amd64 +libsepol1 2.8-1 amd64 +libsigc++-2.0-0v5 2.10.1-2 amd64 +libsigsegv2 2.12-2 amd64 +libslang2 2.3.2-2 amd64 +libsmartcols1 2.33.1-0.1 amd64 +libsmi2ldbl 0.4.8+dfsg2-16 amd64 +libsnappy1v5 1.1.7-1 amd64 +libsocket6-perl 0.29-1+b1 amd64 -libsort-naturally-perl 1.03-1 all -libspandsp2 0.0.6+dfsg-0.1 amd64 -libsqlite3-0 3.16.2-5+deb9u1 amd64 -libss2 1.43.4-2 amd64 -libssh-gcrypt-4 0.7.3-2+deb9u2 amd64 -libssh2-1 1.7.0-1+deb9u1 amd64 +libsodium23 1.0.17-1 amd64 +libsort-naturally-perl 1.03-2 all +libspandsp2 0.0.6+dfsg-2 amd64 +libsqlite3-0 3.27.2-3 amd64 +libss2 1.44.5-1+deb10u2 amd64 +libssh-gcrypt-4 0.8.7-1 amd64 +libssh2-1 1.8.0-2.1 amd64 -libssl1.1 1.1.0k-1~deb9u1 amd64 +libssl1.1 1.1.1c-1 amd64 -libstdc++6 6.3.0-18+deb9u1 amd64 +libstdc++-8-dev 8.3.0-6 amd64 +libstdc++6 8.3.0-6 amd64 -libsystemd0 232-25+deb9u12 amd64 -libtasn1-6 4.10-1.1+deb9u1 amd64 -libterm-readkey-perl 2.37-1 amd64 -libtext-charwidth-perl 0.04-7+b5 amd64 -libtext-iconv-perl 1.7-5+b4 amd64 +libsystemd0 241-7~deb10u1 amd64 +libtasn1-6 4.13-3 amd64 +libterm-readkey-perl 2.38-1 amd64 +libtext-charwidth-perl 0.04-7.1+b1 amd64 +libtext-iconv-perl 1.7-5+b7 amd64 -libtiff5 4.0.8-2+deb9u4 amd64 +libtiff5 4.0.10-4 amd64 -libtinfo5 6.0+20161126-1+deb9u2 amd64 +libtinfo5 6.1+20181013-2+deb10u1 amd64 +libtinfo6 6.1+20181013-2+deb10u1 amd64 -libtommath1 1.0-4 amd64 -libtsan0 6.3.0-18+deb9u1 amd64 -libubsan0 6.3.0-18+deb9u1 amd64 -libudev1 232-25+deb9u12 amd64 +libtommath1 1.1.0-3 amd64 +libtry-tiny-perl 0.30-1 all +libtsan0 8.3.0-6 amd64 +libubsan0 7.4.0-6 amd64 +libubsan1 8.3.0-6 amd64 +libuchardet0 0.0.6-3 amd64 +libudev1 241-7~deb10u1 amd64 +libunbound8 1.9.0-2 amd64 -libunix-syslog-perl 1.1-2+b6 amd64 -liburi-perl 1.71-1 all -libusb-0.1-4 2:0.1.12-30 amd64 -libusb-1.0-0 2:1.0.21-1 amd64 +libunistring2 0.9.10-1 amd64 +libunix-syslog-perl 1.1-3+b1 amd64 +libunwind8 1.2.1-9 amd64 +liburi-perl 1.76-1 all +libusb-0.1-4 2:0.1.12-32 amd64 +libusb-1.0-0 2:1.0.22-2 amd64 -libuuid-perl 0.27-1 amd64 -libuuid1 2.29.2-1+deb9u1 amd64 -libvbr2 2.11.0~alpha-10+deb9u1 amd64 -libwebp6 0.5.2-1 amd64 -libwireshark-data 2.6.7-1~deb9u1 all -libwireshark11 2.6.7-1~deb9u1 amd64 -libwiretap8 2.6.7-1~deb9u1 amd64 -libwrap0 7.6.q-26 amd64 -libwscodecs2 2.6.7-1~deb9u1 amd64 -libwsutil9 2.6.7-1~deb9u1 amd64 -libwww-perl 6.15-1 all -libwww-robotrules-perl 6.01-1 all -libx11-6 2:1.6.4-3+deb9u1 amd64 -libx11-data 2:1.6.4-3+deb9u1 all -libxapian30 1.4.3-2+deb9u3 amd64 -libxau6 1:1.0.8-1 amd64 -libxcb1 1.12-1 amd64 +libutempter0 1.1.6-3 amd64 +libuuid-perl 0.28-1 amd64 +libuuid1 2.33.1-0.1 amd64 +libvbr2 2.11.0~alpha-12 amd64 +libwebp6 0.6.1-2 amd64 +libwireshark-data 2.6.8-1.1 all +libwireshark11 2.6.8-1.1 amd64 +libwiretap8 2.6.8-1.1 amd64 +libwrap0 7.6.q-28 amd64 +libwscodecs2 2.6.8-1.1 amd64 +libwsutil9 2.6.8-1.1 amd64 +libwww-perl 6.36-2 all +libwww-robotrules-perl 6.02-1 all +libx11-6 2:1.6.7-1 amd64 +libx11-data 2:1.6.7-1 all +libxapian30 1.4.11-1 amd64 +libxau6 1:1.0.8-1+b2 amd64 +libxcb1 1.13.1-2 amd64 -libxml2 2.9.4+dfsg1-2.2+deb9u2 amd64 -libxmuu1 2:1.1.2-2 amd64 +libxml2 2.9.4+dfsg1-7+b3 amd64 +libxmuu1 2:1.1.2-2+b3 amd64 -libxslt1.1 1.1.29-2.1+deb9u1 amd64 -libxtables12 1.6.0+snapshot20161117-6 amd64 +libxslt1.1 1.1.32-2.1~deb10u1 amd64 +libxtables12 1.8.2-4 amd64 -libyajl2 2.1.0-2+b3 amd64 -libyaml-0-2 0.1.7-2 amd64 -libzmq5 4.2.1-4+deb9u2 amd64 -linux-base 4.5 all +libyajl2 2.1.0-3 amd64 +libyaml-0-2 0.2.1-1 amd64 +libzmq5 4.3.1-4+deb10u1 amd64 +libzstd1 1.3.8+dfsg-3 amd64 +linux-base 4.6 all +linux-image-4.19.0-6-amd64 4.19.67-2+deb10u1 amd64 -linux-image-amd64 4.9+80+deb9u9 amd64 -linux-libc-dev 4.9.189-3+deb9u1 amd64 -locales 2.24-11+deb9u4 all -login 1:4.4-4.1 amd64 -logrotate 3.11.0-0.1 amd64 -logwatch 7.4.3+git20161207-2 all -lsb-base 9.20161125 all -lsb-release 9.20161125 all -lsof 4.89+dfsg-0.1 amd64 -lvm2 2.02.168-2 amd64 +linux-image-amd64 4.19+105+deb10u1 amd64 +linux-libc-dev 4.19.67-2+deb10u1 amd64 +locales 2.28-10 all +login 1:4.5-1.1 amd64 +logrotate 3.14.0-4 amd64 +logwatch 7.5.0-1 all +lsb-base 10.2019051400 all +lsb-release 10.2019051400 all +lsof 4.91+dfsg-1 amd64 +lvm2 2.03.02-3 amd64 -mailutils 1:3.1.1-1 amd64 -mailutils-common 1:3.1.1-1 all -make 4.1-9.1 amd64 -man-db 2.7.6.1-2 amd64 -manpages 4.10-2 all -mariadb-client 10.1.41-0+deb9u1 all +mailutils 1:3.5-3 amd64 +mailutils-common 1:3.5-3 all +make 4.2.1-1.2 amd64 +man-db 2.8.5-2 amd64 +manpages 4.16-2 all +mariadb-client 1:10.3.17-0+deb10u1 all -mariadb-client-core-10.1 10.1.41-0+deb9u1 amd64 -mariadb-common 10.1.41-0+deb9u1 all -mariadb-server 10.1.41-0+deb9u1 all +mariadb-client-10.3 1:10.3.17-0+deb10u1 amd64 +mariadb-client-core-10.3 1:10.3.17-0+deb10u1 amd64 +mariadb-common 1:10.3.17-0+deb10u1 all +mariadb-server 1:10.3.17-0+deb10u1 all -mariadb-server-core-10.1 10.1.41-0+deb9u1 amd64 +mariadb-server-10.3 1:10.3.17-0+deb10u1 amd64 +mariadb-server-core-10.3 1:10.3.17-0+deb10u1 amd64 -mcrypt 2.6.8-1.3+b1 amd64 -mime-support 3.60 all -mlocate 0.26-2 amd64 -monitoring-plugins-basic 2.2-3 amd64 -monitoring-plugins-common 2.2-3 amd64 -monitoring-plugins-standard 2.2-3 amd64 -mount 2.29.2-1+deb9u1 amd64 -multiarch-support 2.24-11+deb9u4 amd64 -mysql-common 5.8+1.0.2 all -nano 2.7.4-1 amd64 -ncurses-base 6.0+20161126-1+deb9u2 all -ncurses-bin 6.0+20161126-1+deb9u2 amd64 -ncurses-term 6.0+20161126-1+deb9u2 all -needrestart 2.11-3+deb9u1 all -net-tools 1.60+git20161116.90da8a0-1 amd64 -netbase 5.4 all -netcat-traditional 1.10-41+b1 amd64 -netfilter-persistent 1.0.4+nmu2 all -nfacct 1.0.1-1.1+b1 amd64 -nginx-common 1.10.3-1+deb9u3 all -nginx-full 1.10.3-1+deb9u3 amd64 +mcrypt 2.6.8-4 amd64 +mime-support 3.62 all +mlocate 0.26-3 amd64 +monitoring-plugins-basic 2.2-6 amd64 +monitoring-plugins-common 2.2-6 amd64 +monitoring-plugins-standard 2.2-6 amd64 +mount 2.33.1-0.1 amd64 +multiarch-support 2.28-10 amd64 +mysql-common 5.8+1.0.5 all +nano 3.2-3 amd64 +ncurses-base 6.1+20181013-2+deb10u1 all +ncurses-bin 6.1+20181013-2+deb10u1 amd64 +ncurses-term 6.1+20181013-2+deb10u1 all +needrestart 3.4-5 all +net-tools 1.60+git20180626.aebd88e-1 amd64 +netbase 5.6 all +netcat-traditional 1.10-41.1 amd64 +netfilter-persistent 1.0.11 all +nfacct 1.0.2-2 amd64 +nginx-common 1.14.2-2+deb10u1 all +nginx-full 1.14.2-2+deb10u1 amd64 -opendbx-utils 1.4.6-11+b1 amd64 -opendkim 2.11.0~alpha-10+deb9u1 amd64 -opendkim-tools 2.11.0~alpha-10+deb9u1 amd64 +opendbx-utils 1.4.6-13+b1 amd64 +opendkim 2.11.0~alpha-12 amd64 +opendkim-tools 2.11.0~alpha-12 amd64 -openssh-client 1:7.4p1-10+deb9u7 amd64 -openssh-server 1:7.4p1-10+deb9u7 amd64 -openssh-sftp-server 1:7.4p1-10+deb9u7 amd64 -openssl 1.1.0k-1~deb9u1 amd64 -os-prober 1.76~deb9u1 amd64 -p7zip 16.02+dfsg-3+deb9u1 amd64 -parted 3.2-17 amd64 -passwd 1:4.4-4.1 amd64 -patch 2.7.5-1+deb9u2 amd64 -pax 1:20161104-2 amd64 +openssh-client 1:7.9p1-10 amd64 +openssh-server 1:7.9p1-10 amd64 +openssh-sftp-server 1:7.9p1-10 amd64 +openssl 1.1.1c-1 amd64 +os-prober 1.77 amd64 +p7zip 16.02+dfsg-6 amd64 +parted 3.2-25 amd64 +passwd 1:4.5-1.1 amd64 +patch 2.7.6-3+deb10u1 amd64 +pax 1:20190224-1 amd64 -perl 5.24.1-3+deb9u5 amd64 -perl-base 5.24.1-3+deb9u5 amd64 +perl 5.28.1-6 amd64 +perl-base 5.28.1-6 amd64 +perl-modules-5.28 5.28.1-6 all -php 1:7.0+49 all -php-common 1:49 all +php 2:7.3+69 all +php-common 2:69 all -php-fpm 1:7.0+49 all +php-fpm 2:7.3+69 all -php-mbstring 1:7.0+49 all -php-mysql 1:7.0+49 all -php-pear 1:1.10.1+submodules+notgz-9+deb9u1 all +php-mbstring 2:7.3+69 all +php-mysql 2:7.3+69 all +php-pear 1:1.10.6+submodules+notgz-1.1 all -php-phpseclib 2.0.4-1 all -php-xml 1:7.0+49 all +php-phpseclib 2.0.14-1 all +php-xml 2:7.3+69 all +php7.3 7.3.9-1~deb10u1 all +php7.3-cli 7.3.9-1~deb10u1 amd64 +php7.3-common 7.3.9-1~deb10u1 amd64 +php7.3-fpm 7.3.9-1~deb10u1 amd64 +php7.3-json 7.3.9-1~deb10u1 amd64 +php7.3-mbstring 7.3.9-1~deb10u1 amd64 +php7.3-mysql 7.3.9-1~deb10u1 amd64 +php7.3-opcache 7.3.9-1~deb10u1 amd64 +php7.3-readline 7.3.9-1~deb10u1 amd64 +php7.3-xml 7.3.9-1~deb10u1 amd64 -pinentry-curses 1.0.0-2 amd64 -postfix 3.1.12-0+deb9u1 amd64 -postfix-mysql 3.1.12-0+deb9u1 amd64 -postfix-pcre 3.1.12-0+deb9u1 amd64 -postfix-sqlite 3.1.12-0+deb9u1 amd64 -procps 2:3.3.12-3+deb9u1 amd64 -psmisc 22.21-2.1+b2 amd64 -pyflakes 1.3.0-1 all -pyflakes3 1.3.0-1 all -python 2.7.13-2 amd64 -python-apt 1.4.0~beta3 amd64 -python-apt-common 1.4.0~beta3 all -python-backports-abc 0.5-1 all -python-bcrypt 3.1.2-1 amd64 +pinentry-curses 1.1.0-2 amd64 +postfix 3.4.5-1 amd64 +postfix-mysql 3.4.5-1 amd64 +postfix-pcre 3.4.5-1 amd64 +postfix-sqlite 3.4.5-1 amd64 +procps 2:3.3.15-2 amd64 +psmisc 23.2-1 amd64 +pyflakes 2.0.0-1 all +pyflakes3 2.0.0-1 all +python 2.7.16-1 amd64 +python-apt 1.8.4 amd64 +python-apt-common 1.8.4 all +python-asn1crypto 0.24.0-1 all +python-backports-abc 0.5-2 all +python-bcrypt 3.1.6-1 amd64 -python-cffi-backend 1.9.1-2 amd64 -python-chardet 2.3.0-2 all -python-concurrent.futures 3.0.5-3 all -python-configobj 5.0.6-2 all -python-croniter 0.3.12-2 all -python-crypto 2.6.1-7 amd64 -python-cryptography 1.7.1-3+deb9u1 amd64 -python-dateutil 2.5.3-2 all -python-dnspython 1.15.0-1+deb9u1 all -python-enum34 1.1.6-1 all -python-idna 2.2-1 all +python-certifi 2018.8.24-1 all +python-cffi-backend 1.12.2-1 amd64 +python-chardet 3.0.4-3 all +python-concurrent.futures 3.2.0-2 all +python-configobj 5.0.6-3 all +python-croniter 0.3.24-2 all +python-crypto 2.6.1-9+b1 amd64 +python-cryptography 2.6.1-3 amd64 +python-dateutil 2.7.3-3 all +python-dnspython 1.16.0-1 all +python-enum34 1.1.6-2 all +python-idna 2.6-1 all -python-jinja2 2.9.4-1 all -python-lxml 3.7.1-1 amd64 -python-markupsafe 0.23-3 amd64 -python-minimal 2.7.13-2 amd64 -python-msgpack 0.4.8-1 amd64 -python-mysqldb 1.3.7-1.1 amd64 -python-netifaces 0.10.4-0.1+b2 amd64 -python-paramiko 2.0.0-1 all -python-pb-base 0.7.6~deb9 all -python-pb-base-nls 0.7.6~deb9 all -python-pb-logging 0.5.5~deb9 all -python-pkg-resources 33.1.1-1 all -python-psutil 5.0.1-1 amd64 -python-pyasn1 0.1.9-2 all -python-pycurl 7.43.0-2 amd64 -python-pyflakes 1.3.0-1 all +python-jinja2 2.10-2 all +python-lxml 4.3.2-1 amd64 +python-markupsafe 1.1.0-1 amd64 +python-minimal 2.7.16-1 amd64 +python-msgpack 0.5.6-1+b1 amd64 +python-mysqldb 1.3.10-2 amd64 +python-nacl 1.3.0-2 amd64 +python-netifaces 0.10.4-1+b1 amd64 +python-paramiko 2.4.2-0.1 all +python-pb-base 0.7.6~deb10 all +python-pb-base-nls 0.7.6~deb10 all +python-pb-logging 0.5.5~deb10 all +python-pkg-resources 40.8.0-1 all +python-psutil 5.5.1-1 amd64 +python-pyasn1 0.4.2-3 all +python-pycurl 7.43.0.2-0.1 amd64 +python-pyflakes 2.0.0-1 all -python-requests 2.12.4-1 all -python-setuptools 33.1.1-1 all +python-requests 2.21.0-1 all +python-setuptools 40.8.0-1 all -python-six 1.10.0-3 all -python-sqlalchemy 1.0.15+ds1-1 all -python-systemd 233-1 amd64 -python-tornado 4.4.3-1 amd64 -python-tz 2016.7-0.3 all -python-urllib3 1.19.1-1 all +python-six 1.12.0-1 all +python-sqlalchemy 1.2.18+ds1-2 all +python-systemd 234-2+b1 amd64 +python-tornado 5.1.1-4 amd64 +python-tz 2019.1-1 all +python-urllib3 1.24.1-1 all -python-yaml 3.12-1 amd64 -python-zmq 16.0.2-2 amd64 -python2.7 2.7.13-2+deb9u3 amd64 -python2.7-minimal 2.7.13-2+deb9u3 amd64 -python3 3.5.3-1 amd64 -python3-all 3.5.3-1 amd64 -python3-apt 1.4.0~beta3 amd64 -python3-cffi-backend 1.9.1-2 amd64 -python3-configobj 5.0.6-2 all -python3-cryptography 1.7.1-3+deb9u1 amd64 -python3-dnspython 1.15.0-1+deb9u1 all -python3-flake8 3.2.1-1 all -python3-idna 2.2-1 all -python3-mccabe 0.5.3-1 all -python3-minimal 3.5.3-1 amd64 -python3-paramiko 2.0.0-1 all -python3-pb-base 0.7.6~deb9 all -python3-pb-logging 0.5.5~deb9 all -python3-pep8 1.7.0-4 all -python3-pkg-resources 33.1.1-1 all -python3-pyasn1 0.1.9-2 all -python3-pycodestyle 2.2.0-2 all -python3-pyflakes 1.3.0-1 all -python3-setuptools 33.1.1-1 all -python3-six 1.10.0-3 all +python-yaml 3.13-2 amd64 +python-zmq 17.1.2-2 amd64 +python2 2.7.16-1 amd64 +python2-minimal 2.7.16-1 amd64 +python2.7 2.7.16-2 amd64 +python2.7-minimal 2.7.16-2 amd64 +python3 3.7.3-1 amd64 +python3-all 3.7.3-1 amd64 +python3-apt 1.8.4 amd64 +python3-asn1crypto 0.24.0-1 all +python3-bcrypt 3.1.6-1 amd64 +python3-cffi-backend 1.12.2-1 amd64 +python3-configobj 5.0.6-3 all +python3-cryptography 2.6.1-3 amd64 +python3-debconf 1.5.71 all +python3-distutils 3.7.3-1 all +python3-dnspython 1.16.0-1 all +python3-flake8 3.6.0-1 all +python3-idna 2.6-1 all +python3-lib2to3 3.7.3-1 all +python3-mccabe 0.6.1-2 all +python3-minimal 3.7.3-1 amd64 +python3-nacl 1.3.0-2 amd64 +python3-paramiko 2.4.2-0.1 all +python3-pb-base 0.7.6~deb10 all +python3-pb-logging 0.5.5~deb10 all +python3-pep8 1.7.1-3 all +python3-pkg-resources 40.8.0-1 all +python3-ply 3.11-3 all +python3-pyasn1 0.4.2-3 all +python3-pycodestyle 2.4.0-2 all +python3-pyflakes 2.0.0-1 all +python3-setuptools 40.8.0-1 all +python3-six 1.12.0-1 all -rake 10.5.0-2 all -readline-common 7.0-3 all -rename 0.20-4 all +python3.7 3.7.3-2 amd64 +python3.7-minimal 3.7.3-2 amd64 +rake 12.3.1-3 all +readline-common 7.0-5 all +rename 1.10-1 all -rpm 4.12.0.2+dfsg1-2 amd64 -rpm-common 4.12.0.2+dfsg1-2 amd64 -rpm2cpio 4.12.0.2+dfsg1-2 amd64 -rsync 3.1.2-1+deb9u2 amd64 -rsyslog 8.24.0-1 amd64 -ruby 1:2.3.3 amd64 -ruby-did-you-mean 1.0.0-2 all -ruby-minitest 5.9.0-1 all +rpm 4.14.2.1+dfsg1-1 amd64 +rpm-common 4.14.2.1+dfsg1-1 amd64 +rpm2cpio 4.14.2.1+dfsg1-1 amd64 +rsync 3.1.3-6 amd64 +rsyslog 8.1901.0-1 amd64 +ruby 1:2.5.1 amd64 +ruby-did-you-mean 1.2.1-1 all +ruby-minitest 5.11.3-1 all -ruby-power-assert 0.3.0-1 all -ruby-test-unit 3.1.7-2 all +ruby-power-assert 1.1.1-1 all +ruby-test-unit 3.2.8-1 all +ruby-xmlrpc 0.3.0-2 all +ruby2.5 2.5.5-3 amd64 -s-nail 14.8.16-1 amd64 +s-nail 14.9.11-2 amd64 -screen 4.5.0-6 amd64 -sed 4.4-1 amd64 -sensible-utils 0.0.9+deb9u1 all +screen 4.6.2-3 amd64 +sed 4.7-1 amd64 +sensible-utils 0.0.12 all -sipcalc 1.1.5-1+b1 amd64 -socat 1.7.3.1-2+deb9u1 amd64 -spamassassin 3.4.2-1~deb9u1 all -sqlite3 3.16.2-5+deb9u1 amd64 +sipcalc 1.1.6-1 amd64 +socat 1.7.3.2-2 amd64 +spamassassin 3.4.2-1 all +sqlite3 3.27.2-3 amd64 -startpar 0.59-3.1 amd64 -strace 4.15-2 amd64 -sudo 1.8.19p1-2.1 amd64 -swaks 20170101.0-1 all -sysstat 11.4.3-2 amd64 -systemd 232-25+deb9u12 amd64 -systemd-sysv 232-25+deb9u12 amd64 -sysv-rc 2.88dsf-59.9 all -sysvinit-utils 2.88dsf-59.9 amd64 -tar 1.29b-1.1 amd64 -task-english 3.39 all -task-ssh-server 3.39 all -tasksel 3.39 all -tasksel-data 3.39 all -tcpd 7.6.q-26 amd64 -tcpdump 4.9.2-1~deb9u1 amd64 -thin-provisioning-tools 0.6.1-4+b1 amd64 -tig 2.2-1+b2 amd64 +startpar 0.61-1 amd64 +strace 4.26-0.2 amd64 +sudo 1.8.27-1 amd64 +swaks 20181104.0-2 all +sysstat 12.0.3-2 amd64 +systemd 241-7~deb10u1 amd64 +systemd-sysv 241-7~deb10u1 amd64 +sysv-rc 2.93-8 all +sysvinit-utils 2.93-8 amd64 +tar 1.30+dfsg-6 amd64 +task-english 3.53 all +task-ssh-server 3.53 all +tasksel 3.53 all +tasksel-data 3.53 all +tcpd 7.6.q-28 amd64 +tcpdump 4.9.2-3 amd64 +thin-provisioning-tools 0.7.6-2.1 amd64 +tig 2.4.1-1 amd64 -tofrodos 1.7.13+ds-2 amd64 +tofrodos 1.7.13+ds-4 amd64 -tshark 2.6.7-1~deb9u1 amd64 -tzdata 2019c-0+deb9u1 all -ucf 3.0036 all -udev 232-25+deb9u12 amd64 -ulogd2 2.0.5-5 amd64 -ulogd2-dbi 2.0.5-5 amd64 -ulogd2-json 2.0.5-5 amd64 -ulogd2-mysql 2.0.5-5 amd64 -ulogd2-pcap 2.0.5-5 amd64 -ulogd2-pgsql 2.0.5-5 amd64 -ulogd2-sqlite3 2.0.5-5 amd64 -unrar-free 1:0.0.1+cvs20140707-1+b2 amd64 -unzip 6.0-21+deb9u2 amd64 -usbutils 1:007-4+deb9u1 amd64 -util-linux 2.29.2-1+deb9u1 amd64 -util-linux-locales 2.29.2-1+deb9u1 all -uwsgi 2.0.14+20161117-3+deb9u2 amd64 -uwsgi-core 2.0.14+20161117-3+deb9u2 amd64 -uwsgi-plugin-python 2.0.14+20161117-3+deb9u2 amd64 -vim 2:8.0.0197-4+deb9u3 amd64 -vim-addon-manager 0.5.6 all -vim-common 2:8.0.0197-4+deb9u3 all -vim-icinga2 2.6.0-2+deb9u1 all -vim-runtime 2:8.0.0197-4+deb9u3 all -vim-tiny 2:8.0.0197-4+deb9u3 amd64 -wamerican 7.1-1 all -wget 1.18-5+deb9u3 amd64 -whiptail 0.52.19-1+b1 amd64 -whois 5.2.17~deb9u1 amd64 -wireshark-common 2.6.7-1~deb9u1 amd64 +tshark 2.6.8-1.1 amd64 +tzdata 2019c-0+deb10u1 all +ucf 3.0038+nmu1 all +udev 241-7~deb10u1 amd64 +ulogd2 2.0.7-1+b1 amd64 +ulogd2-dbi 2.0.7-1+b1 amd64 +ulogd2-json 2.0.7-1+b1 amd64 +ulogd2-mysql 2.0.7-1+b1 amd64 +ulogd2-pcap 2.0.7-1+b1 amd64 +ulogd2-pgsql 2.0.7-1+b1 amd64 +ulogd2-sqlite3 2.0.7-1+b1 amd64 +unrar-free 1:0.0.1+cvs20140707-4 amd64 +unzip 6.0-23+deb10u1 amd64 +usb.ids 2019.07.27-0+deb10u1 all +usbutils 1:010-3 amd64 +util-linux 2.33.1-0.1 amd64 +util-linux-locales 2.33.1-0.1 all +uwsgi 2.0.18-1 amd64 +uwsgi-core 2.0.18-1 amd64 +uwsgi-plugin-python 2.0.18-1 amd64 +vim 2:8.1.0875-5 amd64 +vim-addon-manager 0.5.10 all +vim-common 2:8.1.0875-5 all +vim-icinga2 2.10.3-2 all +vim-runtime 2:8.1.0875-5 all +vim-tiny 2:8.1.0875-5 amd64 +wamerican 2018.04.16-1 all +wget 1.20.1-1.1 amd64 +whiptail 0.52.20-8 amd64 +whois 5.4.3 amd64 +wireshark-common 2.6.8-1.1 amd64 -xauth 1:1.0.9-1+b2 amd64 -xkb-data 2.19-1+deb9u1 all -xml-core 0.17 all -xxd 2:8.0.0197-4+deb9u3 amd64 -xz-utils 5.2.2-1.2+b1 amd64 -zlib1g 1:1.2.8.dfsg-5 amd64 +xauth 1:1.0.10-1 amd64 +xkb-data 2.26-2 all +xml-core 0.18+nmu1 all +xxd 2:8.1.0875-5 amd64 +xz-utils 5.2.4-1 amd64 +zlib1g 1:1.2.11.dfsg-1 amd64 -zsh 5.3.1-4+b3 amd64 -zsh-common 5.3.1-4 all +zsh 5.7.1-1 amd64 +zsh-common 5.7.1-1 all --- diff --git a/.etckeeper b/.etckeeper index e465608..2d85c50 100755 --- a/.etckeeper +++ b/.etckeeper @@ -2,7 +2,7 @@ mkdir -p './X11/xkb' mkdir -p './apm/event.d' -mkdir -p './apparmor.d/force-complain' +mkdir -p './apt/auth.conf.d' mkdir -p './apt/preferences.d' mkdir -p './bind/dyn' mkdir -p './bind/zones' @@ -12,7 +12,7 @@ mkdir -p './clamav/onupdateexecute.d' mkdir -p './clamav/virusevent.d' mkdir -p './console' mkdir -p './dbus-1/session.d' -mkdir -p './dovecot/private' +mkdir -p './dbus-1/system.d' mkdir -p './fail2ban/fail2ban.d' mkdir -p './initramfs-tools/conf.d' mkdir -p './initramfs-tools/hooks' @@ -30,6 +30,7 @@ mkdir -p './insserv/overrides' mkdir -p './kernel/install.d' mkdir -p './logwatch/scripts/services' mkdir -p './modprobe.d' +mkdir -p './monit/conf-available' mkdir -p './network/if-pre-up.d' mkdir -p './network/interfaces.d' mkdir -p './nginx/modules-available' @@ -42,7 +43,6 @@ mkdir -p './salt/proxy.d' mkdir -p './security/limits.d' mkdir -p './security/namespace.d' mkdir -p './systemd/user' -mkdir -p './tmpfiles.d' mkdir -p './udev/hwdb.d' maybe chmod 0755 '.' maybe chmod 0700 '.etckeeper' @@ -107,23 +107,32 @@ maybe chmod 0644 'amavis/en_US/template-virus-sender.txt' maybe chmod 0755 'apache2' maybe chmod 0755 'apache2/conf-available' maybe chmod 0644 'apache2/conf-available/php7.0-fpm.conf' +maybe chmod 0644 'apache2/conf-available/php7.3-fpm.conf' maybe chmod 0755 'apache2/mods-available' maybe chmod 0644 'apache2/mods-available/php7.0.conf' maybe chmod 0644 'apache2/mods-available/php7.0.load' +maybe chmod 0644 'apache2/mods-available/php7.3.conf' +maybe chmod 0644 'apache2/mods-available/php7.3.load' maybe chmod 0755 'apm' maybe chmod 0755 'apm/event.d' maybe chmod 0755 'apparmor.d' maybe chmod 0755 'apparmor.d/force-complain' maybe chmod 0755 'apparmor.d/local' maybe chmod 0644 'apparmor.d/local/usr.bin.freshclam' +maybe chmod 0644 'apparmor.d/local/usr.bin.man' +maybe chmod 0644 'apparmor.d/local/usr.sbin.chronyd' maybe chmod 0644 'apparmor.d/local/usr.sbin.clamd' maybe chmod 0644 'apparmor.d/local/usr.sbin.haveged' maybe chmod 0644 'apparmor.d/local/usr.sbin.named' +maybe chmod 0644 'apparmor.d/local/usr.sbin.tcpdump' maybe chmod 0644 'apparmor.d/usr.bin.freshclam' +maybe chmod 0644 'apparmor.d/usr.bin.man' +maybe chmod 0644 'apparmor.d/usr.sbin.chronyd' maybe chmod 0644 'apparmor.d/usr.sbin.clamd' maybe chmod 0644 'apparmor.d/usr.sbin.haveged' maybe chmod 0644 'apparmor.d/usr.sbin.mysqld' maybe chmod 0644 'apparmor.d/usr.sbin.named' +maybe chmod 0644 'apparmor.d/usr.sbin.tcpdump' maybe chmod 0755 'apt' maybe chmod 0644 'apt/SALTSTACK-GPG-KEY.pub' maybe chmod 0755 'apt/apt.conf.d' @@ -136,6 +145,7 @@ maybe chmod 0644 'apt/apt.conf.d/20listchanges' maybe chmod 0644 'apt/apt.conf.d/70debconf' maybe chmod 0644 'apt/apt.conf.d/99force-ipv4' maybe chmod 0644 'apt/apt.conf.d/99needrestart' +maybe chmod 0755 'apt/auth.conf.d' maybe chmod 0644 'apt/foreign-packages.txt.2017-07-19.00' maybe chmod 0644 'apt/listchanges.conf' maybe chmod 0755 'apt/preferences.d' @@ -165,6 +175,7 @@ maybe chmod 0644 'apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg' maybe chmod 0644 'apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg' maybe chmod 0644 'apt/trusted.gpg.d/debian-archive-stretch-stable.gpg' maybe chmod 0755 'apticron' +maybe chmod 0644 'apticron/README' maybe chmod 0644 'apticron/apticron.conf' maybe chgrp 'daemon' 'at.deny' maybe chmod 0640 'at.deny' @@ -173,10 +184,8 @@ maybe chmod 0644 'bash_completion' maybe chmod 0755 'bash_completion.d' maybe chmod 0644 'bash_completion.d/fail2ban' maybe chmod 0644 'bash_completion.d/git-prompt' -maybe chmod 0644 'bash_completion.d/grub' maybe chmod 0644 'bash_completion.d/insserv' maybe chmod 0644 'bash_completion.d/salt-common' -maybe chmod 0644 'bash_completion.d/tig' maybe chgrp 'bind' 'bind' maybe chmod 2755 'bind' maybe chmod 0644 'bind/bind.keys' @@ -304,13 +313,6 @@ maybe chmod 0600 'dbconfig-common/phpmyadmin.conf' maybe chmod 0755 'dbus-1' maybe chmod 0755 'dbus-1/session.d' maybe chmod 0755 'dbus-1/system.d' -maybe chmod 0644 'dbus-1/system.d/org.freedesktop.hostname1.conf' -maybe chmod 0644 'dbus-1/system.d/org.freedesktop.locale1.conf' -maybe chmod 0644 'dbus-1/system.d/org.freedesktop.login1.conf' -maybe chmod 0644 'dbus-1/system.d/org.freedesktop.network1.conf' -maybe chmod 0644 'dbus-1/system.d/org.freedesktop.resolve1.conf' -maybe chmod 0644 'dbus-1/system.d/org.freedesktop.systemd1.conf' -maybe chmod 0644 'dbus-1/system.d/org.freedesktop.timedate1.conf' maybe chmod 0644 'debconf.conf' maybe chmod 0644 'debian_version' maybe chmod 0755 'default' @@ -328,6 +330,8 @@ maybe chmod 0644 'default/devpts' maybe chmod 0644 'default/dovecot' maybe chmod 0644 'default/fail2ban' maybe chmod 0644 'default/grub' +maybe chmod 0755 'default/grub.d' +maybe chmod 0644 'default/grub.d/init-select.cfg' maybe chmod 0644 'default/halt' maybe chmod 0644 'default/haveged' maybe chmod 0644 'default/hwclock' @@ -358,6 +362,7 @@ maybe chmod 0644 'dhcp/debug' maybe chmod 0755 'dhcp/dhclient-enter-hooks.d' maybe chmod 0644 'dhcp/dhclient-enter-hooks.d/nodnsupdate' maybe chmod 0755 'dhcp/dhclient-exit-hooks.d' +maybe chmod 0644 'dhcp/dhclient-exit-hooks.d/chrony' maybe chmod 0644 'dhcp/dhclient-exit-hooks.d/rfc3442-classless-routes' maybe chmod 0644 'dhcp/dhclient-exit-hooks.d/timesyncd' maybe chmod 0644 'dhcp/dhclient.conf' @@ -427,9 +432,8 @@ maybe chmod 0644 'dpkg/shlibs.default' maybe chmod 0644 'dpkg/shlibs.override' maybe chmod 0755 'emacs' maybe chmod 0755 'emacs/site-start.d' -maybe chmod 0644 'emacs/site-start.d/00debian-vars.el' maybe chmod 0644 'emacs/site-start.d/50dictionaries-common.el' -maybe chmod 0644 'emacs/site-start.el' +maybe chmod 0644 'emacs/site-start.d/50figlet.el' maybe chmod 0644 'environment' maybe chmod 0755 'etckeeper' maybe chmod 0755 'etckeeper/commit.d' @@ -481,6 +485,7 @@ maybe chmod 0755 'etckeeper/vcs.d' maybe chmod 0755 'etckeeper/vcs.d/50vcs-cmd' maybe chmod 0755 'fail2ban' maybe chmod 0755 'fail2ban/action.d' +maybe chmod 0644 'fail2ban/action.d/abuseipdb.conf' maybe chmod 0644 'fail2ban/action.d/apf.conf' maybe chmod 0644 'fail2ban/action.d/badips.conf' maybe chmod 0644 'fail2ban/action.d/badips.py' @@ -491,11 +496,13 @@ maybe chmod 0644 'fail2ban/action.d/complain.conf' maybe chmod 0644 'fail2ban/action.d/dshield.conf' maybe chmod 0644 'fail2ban/action.d/dummy.conf' maybe chmod 0644 'fail2ban/action.d/firewallcmd-allports.conf' +maybe chmod 0644 'fail2ban/action.d/firewallcmd-common.conf' maybe chmod 0644 'fail2ban/action.d/firewallcmd-ipset.conf' maybe chmod 0644 'fail2ban/action.d/firewallcmd-multiport.conf' maybe chmod 0644 'fail2ban/action.d/firewallcmd-new.conf' maybe chmod 0644 'fail2ban/action.d/firewallcmd-rich-logging.conf' maybe chmod 0644 'fail2ban/action.d/firewallcmd-rich-rules.conf' +maybe chmod 0644 'fail2ban/action.d/helpers-common.conf' maybe chmod 0644 'fail2ban/action.d/hostsdeny.conf' maybe chmod 0644 'fail2ban/action.d/ipfilter.conf' maybe chmod 0644 'fail2ban/action.d/ipfw.conf' @@ -516,9 +523,11 @@ maybe chmod 0644 'fail2ban/action.d/mail-whois-lines.conf' maybe chmod 0644 'fail2ban/action.d/mail-whois.conf' maybe chmod 0644 'fail2ban/action.d/mail.conf' maybe chmod 0644 'fail2ban/action.d/mynetwatchman.conf' +maybe chmod 0644 'fail2ban/action.d/netscaler.conf' maybe chmod 0644 'fail2ban/action.d/nftables-allports.conf' maybe chmod 0644 'fail2ban/action.d/nftables-common.conf' maybe chmod 0644 'fail2ban/action.d/nftables-multiport.conf' +maybe chmod 0644 'fail2ban/action.d/nginx-block-map.conf' maybe chmod 0644 'fail2ban/action.d/npf.conf' maybe chmod 0644 'fail2ban/action.d/nsupdate.conf' maybe chmod 0644 'fail2ban/action.d/osx-afctl.conf' @@ -564,6 +573,7 @@ maybe chmod 0644 'fail2ban/filter.d/courier-auth.conf' maybe chmod 0644 'fail2ban/filter.d/courier-smtp.conf' maybe chmod 0644 'fail2ban/filter.d/cyrus-imap.conf' maybe chmod 0644 'fail2ban/filter.d/directadmin.conf' +maybe chmod 0644 'fail2ban/filter.d/domino-smtp.conf' maybe chmod 0644 'fail2ban/filter.d/dovecot.conf' maybe chmod 0644 'fail2ban/filter.d/dovecot.iredmail.conf' maybe chmod 0644 'fail2ban/filter.d/dropbear.conf' @@ -599,6 +609,7 @@ maybe chmod 0644 'fail2ban/filter.d/oracleims.conf' maybe chmod 0644 'fail2ban/filter.d/pam-generic.conf' maybe chmod 0644 'fail2ban/filter.d/perdition.conf' maybe chmod 0644 'fail2ban/filter.d/php-url-fopen.conf' +maybe chmod 0644 'fail2ban/filter.d/phpmyadmin-syslog.conf' maybe chmod 0644 'fail2ban/filter.d/portsentry.conf' maybe chmod 0644 'fail2ban/filter.d/postfix-rbl.conf' maybe chmod 0644 'fail2ban/filter.d/postfix-sasl.conf' @@ -631,12 +642,14 @@ maybe chmod 0644 'fail2ban/filter.d/vsftpd.conf' maybe chmod 0644 'fail2ban/filter.d/webmin-auth.conf' maybe chmod 0644 'fail2ban/filter.d/wuftpd.conf' maybe chmod 0644 'fail2ban/filter.d/xinetd-fail.conf' +maybe chmod 0644 'fail2ban/filter.d/zoneminder.conf' maybe chmod 0644 'fail2ban/jail.conf' maybe chmod 0755 'fail2ban/jail.d' maybe chmod 0644 'fail2ban/jail.d/defaults-debian.conf' maybe chmod 0644 'fail2ban/jail.d/postfix.conf' maybe chmod 0644 'fail2ban/jail.d/ssh.conf' maybe chmod 0644 'fail2ban/jail.local' +maybe chmod 0644 'fail2ban/paths-arch.conf' maybe chmod 0644 'fail2ban/paths-common.conf' maybe chmod 0644 'fail2ban/paths-debian.conf' maybe chmod 0644 'fail2ban/paths-opensuse.conf' @@ -664,7 +677,7 @@ maybe chmod 0755 'groff' maybe chmod 0644 'groff/man.local' maybe chmod 0644 'groff/mdoc.local' maybe chmod 0644 'group' -maybe chmod 0600 'group-' +maybe chmod 0644 'group-' maybe chmod 0755 'grub.d' maybe chmod 0755 'grub.d/00_header' maybe chmod 0755 'grub.d/05_debian_theme' @@ -677,7 +690,8 @@ maybe chmod 0755 'grub.d/41_custom' maybe chmod 0644 'grub.d/README' maybe chgrp 'shadow' 'gshadow' maybe chmod 0640 'gshadow' -maybe chmod 0600 'gshadow-' +maybe chgrp 'shadow' 'gshadow-' +maybe chmod 0640 'gshadow-' maybe chmod 0755 'gss' maybe chmod 0755 'gss/mech.d' maybe chmod 0644 'gss/mech.d/README' @@ -711,6 +725,7 @@ maybe chmod 0644 'icinga2/features-available/checker.conf' maybe chmod 0644 'icinga2/features-available/command.conf' maybe chmod 0644 'icinga2/features-available/compatlog.conf' maybe chmod 0644 'icinga2/features-available/debuglog.conf' +maybe chmod 0644 'icinga2/features-available/elasticsearch.conf' maybe chmod 0644 'icinga2/features-available/gelf.conf' maybe chmod 0644 'icinga2/features-available/graphite.conf' maybe chmod 0644 'icinga2/features-available/influxdb.conf' @@ -755,6 +770,7 @@ maybe chmod 0755 'init.d/atd' maybe chmod 0755 'init.d/bind9' maybe chmod 0755 'init.d/bootlogs' maybe chmod 0755 'init.d/bootmisc.sh' +maybe chmod 0755 'init.d/brightness' maybe chmod 0755 'init.d/checkfs.sh' maybe chmod 0755 'init.d/checkroot-bootclean.sh' maybe chmod 0755 'init.d/checkroot.sh' @@ -778,9 +794,7 @@ maybe chmod 0755 'init.d/keyboard-setup.sh' maybe chmod 0755 'init.d/killprocs' maybe chmod 0755 'init.d/kmod' maybe chmod 0755 'init.d/lvm2' -maybe chmod 0755 'init.d/lvm2-lvmetad' maybe chmod 0755 'init.d/lvm2-lvmpolld' -maybe chmod 0755 'init.d/motd' maybe chmod 0755 'init.d/mountall-bootclean.sh' maybe chmod 0755 'init.d/mountall.sh' maybe chmod 0755 'init.d/mountdevsubfs.sh' @@ -793,11 +807,10 @@ maybe chmod 0755 'init.d/networking' maybe chmod 0755 'init.d/nginx' maybe chmod 0755 'init.d/opendkim' maybe chmod 0755 'init.d/php7.0-fpm' +maybe chmod 0755 'init.d/php7.3-fpm' maybe chmod 0755 'init.d/postfix' maybe chmod 0755 'init.d/procps' -maybe chmod 0755 'init.d/rc' maybe chmod 0755 'init.d/rc.local' -maybe chmod 0755 'init.d/rcS' maybe chmod 0755 'init.d/reboot' maybe chmod 0755 'init.d/rmnologin' maybe chmod 0755 'init.d/rsync' @@ -806,7 +819,6 @@ maybe chmod 0755 'init.d/salt-minion' maybe chmod 0755 'init.d/screen-cleanup' maybe chmod 0755 'init.d/sendsigs' maybe chmod 0755 'init.d/single' -maybe chmod 0644 'init.d/skeleton' maybe chmod 0755 'init.d/spamassassin' maybe chmod 0755 'init.d/ssh' maybe chmod 0755 'init.d/sudo' @@ -819,20 +831,10 @@ maybe chmod 0755 'init.d/umountroot' maybe chmod 0755 'init.d/urandom' maybe chmod 0755 'init.d/uwsgi' maybe chmod 0755 'init.d/x11-common' -maybe chmod 0644 'init/network-interface-container.conf' -maybe chmod 0644 'init/network-interface-security.conf' -maybe chmod 0644 'init/network-interface.conf' -maybe chmod 0644 'init/networking.conf' -maybe chmod 0644 'init/nginx.conf' maybe chmod 0644 'init/php5-fpm.override' maybe chmod 0644 'init/php7.0-fpm.conf' +maybe chmod 0644 'init/php7.3-fpm.conf' maybe chmod 0644 'init/salt-minion.conf' -maybe chmod 0644 'init/ssh.conf' -maybe chmod 0644 'init/startpar-bridge.conf' -maybe chmod 0644 'init/udev.conf' -maybe chmod 0644 'init/udevmonitor.conf' -maybe chmod 0644 'init/udevtrigger.conf' -maybe chmod 0644 'init/ulogd2.conf' maybe chmod 0755 'initramfs-tools' maybe chmod 0755 'initramfs-tools/conf.d' maybe chmod 0755 'initramfs-tools/hooks' @@ -854,6 +856,7 @@ maybe chmod 0644 'inputrc' maybe chmod 0755 'insserv' maybe chmod 0644 'insserv.conf' maybe chmod 0755 'insserv.conf.d' +maybe chmod 0644 'insserv.conf.d/bind9' maybe chmod 0644 'insserv.conf.d/mariadb' maybe chmod 0644 'insserv.conf.d/postfix' maybe chmod 0755 'insserv/overrides' @@ -864,6 +867,8 @@ maybe chmod 0644 'iproute2/group' maybe chmod 0644 'iproute2/nl_protos' maybe chmod 0644 'iproute2/rt_dsfield' maybe chmod 0644 'iproute2/rt_protos' +maybe chmod 0755 'iproute2/rt_protos.d' +maybe chmod 0644 'iproute2/rt_protos.d/README' maybe chmod 0644 'iproute2/rt_realms' maybe chmod 0644 'iproute2/rt_scopes' maybe chmod 0644 'iproute2/rt_tables' @@ -936,19 +941,25 @@ maybe chmod 0755 'logcheck' maybe chmod 0755 'logcheck/ignore.d.paranoid' maybe chmod 0644 'logcheck/ignore.d.paranoid/clamav-daemon' maybe chmod 0644 'logcheck/ignore.d.paranoid/mariadb-server-10_1' +maybe chmod 0644 'logcheck/ignore.d.paranoid/mariadb-server-10_3' maybe chmod 0755 'logcheck/ignore.d.server' maybe chmod 0644 'logcheck/ignore.d.server/clamav-daemon' maybe chmod 0644 'logcheck/ignore.d.server/clamav-freshclam' +maybe chmod 0644 'logcheck/ignore.d.server/gpg-agent' maybe chmod 0644 'logcheck/ignore.d.server/mariadb-server-10_1' +maybe chmod 0644 'logcheck/ignore.d.server/mariadb-server-10_3' maybe chmod 0644 'logcheck/ignore.d.server/rsyslog' maybe chmod 0755 'logcheck/ignore.d.workstation' maybe chmod 0644 'logcheck/ignore.d.workstation/mariadb-server-10_1' +maybe chmod 0644 'logcheck/ignore.d.workstation/mariadb-server-10_3' maybe chmod 0644 'login.defs' maybe chmod 0644 'logrotate.conf' maybe chmod 0755 'logrotate.d' +maybe chmod 0644 'logrotate.d/alternatives' maybe chmod 0644 'logrotate.d/apt' maybe chmod 0644 'logrotate.d/aptitude' maybe chmod 0644 'logrotate.d/bind' +maybe chmod 0644 'logrotate.d/btmp' maybe chmod 0644 'logrotate.d/chrony' maybe chmod 0644 'logrotate.d/clamav-daemon' maybe chmod 0644 'logrotate.d/clamav-freshclam' @@ -961,10 +972,12 @@ maybe chmod 0644 'logrotate.d/mail' maybe chmod 0644 'logrotate.d/mysql-server' maybe chmod 0644 'logrotate.d/nginx' maybe chmod 0644 'logrotate.d/php7.0-fpm' +maybe chmod 0644 'logrotate.d/php7.3-fpm' maybe chmod 0644 'logrotate.d/rsyslog' maybe chmod 0644 'logrotate.d/salt-common' maybe chmod 0644 'logrotate.d/ulogd2' maybe chmod 0644 'logrotate.d/uwsgi' +maybe chmod 0644 'logrotate.d/wtmp' maybe chmod 0755 'logwatch' maybe chmod 0755 'logwatch/conf' maybe chmod 0755 'logwatch/conf/logfiles' @@ -988,6 +1001,16 @@ maybe chmod 0700 'lvm/archive' maybe chmod 0700 'lvm/backup' maybe chmod 0600 'lvm/backup/vg00' maybe chmod 0644 'lvm/lvm.conf' +maybe chmod 0644 'lvm/lvmlocal.conf' +maybe chmod 0755 'lvm/profile' +maybe chmod 0644 'lvm/profile/cache-mq.profile' +maybe chmod 0644 'lvm/profile/cache-smq.profile' +maybe chmod 0644 'lvm/profile/command_profile_template.profile' +maybe chmod 0644 'lvm/profile/lvmdbusd.profile' +maybe chmod 0644 'lvm/profile/metadata_profile_template.profile' +maybe chmod 0644 'lvm/profile/thin-generic.profile' +maybe chmod 0644 'lvm/profile/thin-performance.profile' +maybe chmod 0644 'lvm/profile/vdo-small.profile' maybe chmod 0444 'machine-id' maybe chmod 0644 'magic' maybe chmod 0644 'magic.mime' @@ -1004,8 +1027,10 @@ maybe chmod 0755 'modprobe.d' maybe chmod 0644 'modules' maybe chmod 0755 'modules-load.d' maybe chmod 0755 'monit' +maybe chmod 0755 'monit/conf-available' maybe chmod 0755 'monit/monitrc.d' maybe chmod 0644 'monit/monitrc.d/fail2ban' +maybe chmod 0644 'motd' maybe chmod 0644 'motd.tail' maybe chmod 0755 'mysql' maybe chmod 0755 'mysql/conf.d' @@ -1086,7 +1111,6 @@ maybe chmod 0755 'network/if-down.d' maybe chmod 0755 'network/if-down.d/bind9' maybe chmod 0755 'network/if-down.d/clamav-freshclam-ifupdown' maybe chmod 0755 'network/if-down.d/postfix' -maybe chmod 0755 'network/if-down.d/upstart' maybe chmod 0755 'network/if-post-down.d' maybe chmod 0755 'network/if-post-down.d/chrony' maybe chmod 0755 'network/if-pre-up.d' @@ -1095,14 +1119,10 @@ maybe chmod 0755 'network/if-up.d/bind9' maybe chmod 0755 'network/if-up.d/chrony' maybe chmod 0755 'network/if-up.d/clamav-freshclam-ifupdown' maybe chmod 0755 'network/if-up.d/mountnfs' -maybe chmod 0755 'network/if-up.d/openssh-server' maybe chmod 0755 'network/if-up.d/postfix' -maybe chmod 0755 'network/if-up.d/upstart' maybe chmod 0644 'network/interfaces' maybe chmod 0755 'network/interfaces.d' maybe chmod 0644 'networks' -maybe chmod 0755 'newt' -maybe chmod 0644 'newt/palette.original' maybe chmod 0755 'nginx' maybe chmod 0755 'nginx/conf.d' maybe chmod 0644 'nginx/conf.d/00-default.conf' @@ -1163,17 +1183,17 @@ maybe chmod 0644 'pam.d/runuser' maybe chmod 0644 'pam.d/runuser-l' maybe chmod 0644 'pam.d/sshd' maybe chmod 0644 'pam.d/su' +maybe chmod 0644 'pam.d/su-l' maybe chmod 0644 'pam.d/sudo' maybe chmod 0644 'pam.d/systemd-user' maybe chmod 0644 'passwd' -maybe chmod 0600 'passwd-' +maybe chmod 0644 'passwd-' maybe chmod 0755 'pear' maybe chmod 0644 'pear/pear.conf' maybe chmod 0755 'perl' maybe chmod 0755 'perl/CPAN' maybe chmod 0755 'perl/Net' maybe chmod 0644 'perl/Net/libnet.cfg' -maybe chmod 0644 'perl/sitecustomize.pl' maybe chmod 0755 'php' maybe chmod 0755 'php/7.0' maybe chmod 0755 'php/7.0/apache2' @@ -1220,6 +1240,50 @@ maybe chmod 0644 'php/7.0/mods-available/xml.ini' maybe chmod 0644 'php/7.0/mods-available/xmlreader.ini' maybe chmod 0644 'php/7.0/mods-available/xmlwriter.ini' maybe chmod 0644 'php/7.0/mods-available/xsl.ini' +maybe chmod 0755 'php/7.3' +maybe chmod 0755 'php/7.3/apache2' +maybe chmod 0755 'php/7.3/apache2/conf.d' +maybe chmod 0644 'php/7.3/apache2/php.ini' +maybe chmod 0755 'php/7.3/cli' +maybe chmod 0755 'php/7.3/cli/conf.d' +maybe chmod 0644 'php/7.3/cli/php.ini' +maybe chmod 0755 'php/7.3/fpm' +maybe chmod 0755 'php/7.3/fpm/conf.d' +maybe chmod 0644 'php/7.3/fpm/php-fpm.conf' +maybe chmod 0644 'php/7.3/fpm/php.ini' +maybe chmod 0755 'php/7.3/fpm/pool.d' +maybe chmod 0644 'php/7.3/fpm/pool.d/www.conf' +maybe chmod 0755 'php/7.3/mods-available' +maybe chmod 0644 'php/7.3/mods-available/calendar.ini' +maybe chmod 0644 'php/7.3/mods-available/ctype.ini' +maybe chmod 0644 'php/7.3/mods-available/dom.ini' +maybe chmod 0644 'php/7.3/mods-available/exif.ini' +maybe chmod 0644 'php/7.3/mods-available/fileinfo.ini' +maybe chmod 0644 'php/7.3/mods-available/ftp.ini' +maybe chmod 0644 'php/7.3/mods-available/gettext.ini' +maybe chmod 0644 'php/7.3/mods-available/iconv.ini' +maybe chmod 0644 'php/7.3/mods-available/json.ini' +maybe chmod 0644 'php/7.3/mods-available/mbstring.ini' +maybe chmod 0644 'php/7.3/mods-available/mysqli.ini' +maybe chmod 0644 'php/7.3/mods-available/mysqlnd.ini' +maybe chmod 0644 'php/7.3/mods-available/opcache.ini' +maybe chmod 0644 'php/7.3/mods-available/pdo.ini' +maybe chmod 0644 'php/7.3/mods-available/pdo_mysql.ini' +maybe chmod 0644 'php/7.3/mods-available/phar.ini' +maybe chmod 0644 'php/7.3/mods-available/posix.ini' +maybe chmod 0644 'php/7.3/mods-available/readline.ini' +maybe chmod 0644 'php/7.3/mods-available/shmop.ini' +maybe chmod 0644 'php/7.3/mods-available/simplexml.ini' +maybe chmod 0644 'php/7.3/mods-available/sockets.ini' +maybe chmod 0644 'php/7.3/mods-available/sysvmsg.ini' +maybe chmod 0644 'php/7.3/mods-available/sysvsem.ini' +maybe chmod 0644 'php/7.3/mods-available/sysvshm.ini' +maybe chmod 0644 'php/7.3/mods-available/tokenizer.ini' +maybe chmod 0644 'php/7.3/mods-available/wddx.ini' +maybe chmod 0644 'php/7.3/mods-available/xml.ini' +maybe chmod 0644 'php/7.3/mods-available/xmlreader.ini' +maybe chmod 0644 'php/7.3/mods-available/xmlwriter.ini' +maybe chmod 0644 'php/7.3/mods-available/xsl.ini' maybe chmod 0755 'php5' maybe chmod 0755 'php5/fpm' maybe chmod 0644 'php5/fpm/php.ini.2016.07.20.08.58.54' @@ -1256,7 +1320,6 @@ maybe chmod 0644 'postfix/main.cf' maybe chmod 0644 'postfix/main.cf.2016.07.20.08.58.54' maybe chmod 0644 'postfix/main.cf.2016.07.20.09.03.50' maybe chmod 0644 'postfix/main.cf.proto' -maybe chmod 0644 'postfix/makedefs.out' maybe chmod 0644 'postfix/master.cf' maybe chmod 0644 'postfix/master.cf.2016.07.20.08.58.54' maybe chmod 0644 'postfix/master.cf.2016.07.20.09.03.50' @@ -1319,6 +1382,8 @@ maybe chmod 0644 'profile' maybe chmod 0755 'profile.d' maybe chmod 0644 'profile.d/bash_completion.sh' maybe chmod 0644 'profile.d/fbrehm.sh' +maybe chmod 0644 'profile.d/gawk.csh' +maybe chmod 0644 'profile.d/gawk.sh' maybe chmod 0644 'protocols' maybe chmod 0755 'python' maybe chmod 0644 'python/debian_config' @@ -1327,6 +1392,8 @@ maybe chmod 0644 'python2.7/sitecustomize.py' maybe chmod 0755 'python3' maybe chmod 0755 'python3.5' maybe chmod 0644 'python3.5/sitecustomize.py' +maybe chmod 0755 'python3.7' +maybe chmod 0644 'python3.7/sitecustomize.py' maybe chmod 0644 'python3/debian_config' maybe chmod 0755 'rc.local' maybe chmod 0755 'rc0.d' @@ -1350,7 +1417,6 @@ maybe chmod 0644 'resolv.conf' maybe chmod 0755 'resolvconf' maybe chmod 0755 'resolvconf/update-libc.d' maybe chmod 0755 'resolvconf/update-libc.d/postfix' -maybe chmod 0755 'rmt' maybe chmod 0644 'rpc' maybe chmod 0644 'rsyslog.conf' maybe chmod 0755 'rsyslog.d' @@ -1395,7 +1461,8 @@ maybe chmod 0755 'sgml' maybe chmod 0644 'sgml/xml-core.cat' maybe chgrp 'shadow' 'shadow' maybe chmod 0640 'shadow' -maybe chmod 0600 'shadow-' +maybe chgrp 'shadow' 'shadow-' +maybe chmod 0640 'shadow-' maybe chmod 0644 'shells' maybe chmod 0755 'skel' maybe chmod 0644 'skel/.bash_logout' @@ -1445,15 +1512,16 @@ maybe chgrp 'ssl-cert' 'ssl/private/ssl-cert-snakeoil.key' maybe chmod 0640 'ssl/private/ssl-cert-snakeoil.key' maybe chmod 0644 'staff-group-for-usr-local' maybe chmod 0644 'subgid' -maybe chmod 0600 'subgid-' +maybe chmod 0644 'subgid-' maybe chmod 0644 'subuid' -maybe chmod 0600 'subuid-' +maybe chmod 0644 'subuid-' maybe chmod 0440 'sudoers' maybe chmod 0755 'sudoers.d' maybe chmod 0440 'sudoers.d/README' maybe chmod 0644 'sysctl.conf' maybe chmod 0755 'sysctl.d' maybe chmod 0644 'sysctl.d/README.sysctl' +maybe chmod 0644 'sysctl.d/protect-links.conf' maybe chmod 0755 'sysstat' maybe chmod 0644 'sysstat/sysstat' maybe chmod 0644 'sysstat/sysstat.ioconf' @@ -1463,7 +1531,9 @@ maybe chmod 0644 'systemd/logind.conf' maybe chmod 0755 'systemd/network' maybe chmod 0644 'systemd/network/50-virtio-kernel-names.link' maybe chmod 0644 'systemd/network/99-default.link' +maybe chmod 0644 'systemd/networkd.conf' maybe chmod 0644 'systemd/resolved.conf' +maybe chmod 0644 'systemd/sleep.conf' maybe chmod 0755 'systemd/system' maybe chmod 0644 'systemd/system.conf' maybe chmod 0755 'systemd/system/.old' @@ -1492,6 +1562,7 @@ maybe chmod 0644 'terminfo/README' maybe chmod 0644 'tigrc' maybe chmod 0644 'timezone' maybe chmod 0755 'tmpfiles.d' +maybe chmod 0644 'tmpfiles.d/screen-cleanup.conf' maybe chmod 0644 'ucf.conf' maybe chmod 0755 'udev' maybe chmod 0755 'udev/hwdb.d' @@ -1524,6 +1595,7 @@ maybe chmod 0644 'vim/vimrc.tiny' maybe chmod 0644 'wgetrc' maybe chmod 0755 'wireshark' maybe chmod 0644 'wireshark/init.lua' +maybe chmod 0644 'xattr.conf' maybe chmod 0755 'xdg' maybe chmod 0755 'xdg/systemd' maybe chmod 0755 'xml' diff --git a/.gitignore b/.gitignore index 58313a2..9196cf5 100644 --- a/.gitignore +++ b/.gitignore @@ -50,6 +50,5 @@ check_mk/logwatch.state .sw? \#*\# DEADJOE -/motd # end section managed by etckeeper diff --git a/NetworkManager/dispatcher.d/20-chrony b/NetworkManager/dispatcher.d/20-chrony index 084aed6..0b0c3e7 100755 --- a/NetworkManager/dispatcher.d/20-chrony +++ b/NetworkManager/dispatcher.d/20-chrony @@ -1,17 +1,15 @@ #!/bin/sh -# This is a NetworkManager dispatcher script for chronyd to set its NTP sources -# online/offline when a default route is configured/removed on the system. +# This is a NetworkManager dispatcher / networkd-dispatcher script for +# chronyd to set its NTP sources online or offline when a network interface +# is configured or removed export LC_ALL=C -if [ "$2" = "up" ]; then - /sbin/ip route list dev "$1" | grep -q '^default' && - /usr/bin/chronyc online > /dev/null 2>&1 -fi +# For NetworkManager consider only up/down events +[ $# -ge 2 ] && [ "$2" != "up" ] && [ "$2" != "down" ] && exit 0 -if [ "$2" = "down" ]; then - /sbin/ip route list | grep -q '^default' || - /usr/bin/chronyc offline > /dev/null 2>&1 -fi +# Note: for networkd-dispatcher routable.d ~= on and off.d ~= off + +chronyc onoffline > /dev/null 2>&1 exit 0 diff --git a/alternatives/README b/alternatives/README index 54ef740..4c4d215 100644 --- a/alternatives/README +++ b/alternatives/README @@ -1,2 +1,2 @@ -Please read the update-alternatives(8) man page for information on this +Please read the update-alternatives(1) man page for information on this directory and its contents. diff --git a/alternatives/arptables b/alternatives/arptables new file mode 120000 index 0000000..f8fcc7b --- /dev/null +++ b/alternatives/arptables @@ -0,0 +1 @@ +/usr/sbin/arptables-nft \ No newline at end of file diff --git a/alternatives/arptables-restore b/alternatives/arptables-restore new file mode 120000 index 0000000..95e87dc --- /dev/null +++ b/alternatives/arptables-restore @@ -0,0 +1 @@ +/usr/sbin/arptables-nft-restore \ No newline at end of file diff --git a/alternatives/arptables-save b/alternatives/arptables-save new file mode 120000 index 0000000..9bb1596 --- /dev/null +++ b/alternatives/arptables-save @@ -0,0 +1 @@ +/usr/sbin/arptables-nft-save \ No newline at end of file diff --git a/alternatives/ebtables b/alternatives/ebtables new file mode 120000 index 0000000..8d5f660 --- /dev/null +++ b/alternatives/ebtables @@ -0,0 +1 @@ +/usr/sbin/ebtables-nft \ No newline at end of file diff --git a/alternatives/ebtables-restore b/alternatives/ebtables-restore new file mode 120000 index 0000000..c2e5813 --- /dev/null +++ b/alternatives/ebtables-restore @@ -0,0 +1 @@ +/usr/sbin/ebtables-nft-restore \ No newline at end of file diff --git a/alternatives/ebtables-save b/alternatives/ebtables-save new file mode 120000 index 0000000..600f8c2 --- /dev/null +++ b/alternatives/ebtables-save @@ -0,0 +1 @@ +/usr/sbin/ebtables-nft-save \ No newline at end of file diff --git a/alternatives/editor.da.1.gz b/alternatives/editor.da.1.gz new file mode 120000 index 0000000..c90068f --- /dev/null +++ b/alternatives/editor.da.1.gz @@ -0,0 +1 @@ +/usr/share/man/da/man1/vim.1.gz \ No newline at end of file diff --git a/alternatives/editor.de.1.gz b/alternatives/editor.de.1.gz new file mode 120000 index 0000000..d89833a --- /dev/null +++ b/alternatives/editor.de.1.gz @@ -0,0 +1 @@ +/usr/share/man/de/man1/vim.1.gz \ No newline at end of file diff --git a/alternatives/ex.da.1.gz b/alternatives/ex.da.1.gz new file mode 120000 index 0000000..c90068f --- /dev/null +++ b/alternatives/ex.da.1.gz @@ -0,0 +1 @@ +/usr/share/man/da/man1/vim.1.gz \ No newline at end of file diff --git a/alternatives/ex.de.1.gz b/alternatives/ex.de.1.gz new file mode 120000 index 0000000..d89833a --- /dev/null +++ b/alternatives/ex.de.1.gz @@ -0,0 +1 @@ +/usr/share/man/de/man1/vim.1.gz \ No newline at end of file diff --git a/alternatives/ip6tables b/alternatives/ip6tables new file mode 120000 index 0000000..4c913e2 --- /dev/null +++ b/alternatives/ip6tables @@ -0,0 +1 @@ +/usr/sbin/ip6tables-nft \ No newline at end of file diff --git a/alternatives/ip6tables-restore b/alternatives/ip6tables-restore new file mode 120000 index 0000000..46918a9 --- /dev/null +++ b/alternatives/ip6tables-restore @@ -0,0 +1 @@ +/usr/sbin/ip6tables-nft-restore \ No newline at end of file diff --git a/alternatives/ip6tables-save b/alternatives/ip6tables-save new file mode 120000 index 0000000..04525f0 --- /dev/null +++ b/alternatives/ip6tables-save @@ -0,0 +1 @@ +/usr/sbin/ip6tables-nft-save \ No newline at end of file diff --git a/alternatives/iptables b/alternatives/iptables new file mode 120000 index 0000000..c55fd50 --- /dev/null +++ b/alternatives/iptables @@ -0,0 +1 @@ +/usr/sbin/iptables-nft \ No newline at end of file diff --git a/alternatives/iptables-restore b/alternatives/iptables-restore new file mode 120000 index 0000000..9553657 --- /dev/null +++ b/alternatives/iptables-restore @@ -0,0 +1 @@ +/usr/sbin/iptables-nft-restore \ No newline at end of file diff --git a/alternatives/iptables-save b/alternatives/iptables-save new file mode 120000 index 0000000..051d68b --- /dev/null +++ b/alternatives/iptables-save @@ -0,0 +1 @@ +/usr/sbin/iptables-nft-save \ No newline at end of file diff --git a/alternatives/phar b/alternatives/phar index b02bc5b..b3b4ae7 120000 --- a/alternatives/phar +++ b/alternatives/phar @@ -1 +1 @@ -/usr/bin/phar7.0 \ No newline at end of file +/usr/bin/phar7.3 \ No newline at end of file diff --git a/alternatives/phar.1.gz b/alternatives/phar.1.gz index b627d37..f308505 120000 --- a/alternatives/phar.1.gz +++ b/alternatives/phar.1.gz @@ -1 +1 @@ -/usr/share/man/man1/phar7.0.1.gz \ No newline at end of file +/usr/share/man/man1/phar7.3.1.gz \ No newline at end of file diff --git a/alternatives/phar.phar b/alternatives/phar.phar index c6602a3..a03cf84 120000 --- a/alternatives/phar.phar +++ b/alternatives/phar.phar @@ -1 +1 @@ -/usr/bin/phar.phar7.0 \ No newline at end of file +/usr/bin/phar.phar7.3 \ No newline at end of file diff --git a/alternatives/phar.phar.1.gz b/alternatives/phar.phar.1.gz index 9163d0f..74ee7f3 120000 --- a/alternatives/phar.phar.1.gz +++ b/alternatives/phar.phar.1.gz @@ -1 +1 @@ -/usr/share/man/man1/phar.phar7.0.1.gz \ No newline at end of file +/usr/share/man/man1/phar.phar7.3.1.gz \ No newline at end of file diff --git a/alternatives/php b/alternatives/php index d87548b..c890124 120000 --- a/alternatives/php +++ b/alternatives/php @@ -1 +1 @@ -/usr/bin/php7.0 \ No newline at end of file +/usr/bin/php7.3 \ No newline at end of file diff --git a/alternatives/php.1.gz b/alternatives/php.1.gz index 8ef3a9a..4338797 120000 --- a/alternatives/php.1.gz +++ b/alternatives/php.1.gz @@ -1 +1 @@ -/usr/share/man/man1/php7.0.1.gz \ No newline at end of file +/usr/share/man/man1/php7.3.1.gz \ No newline at end of file diff --git a/alternatives/vi.da.1.gz b/alternatives/vi.da.1.gz new file mode 120000 index 0000000..c90068f --- /dev/null +++ b/alternatives/vi.da.1.gz @@ -0,0 +1 @@ +/usr/share/man/da/man1/vim.1.gz \ No newline at end of file diff --git a/alternatives/vi.de.1.gz b/alternatives/vi.de.1.gz new file mode 120000 index 0000000..d89833a --- /dev/null +++ b/alternatives/vi.de.1.gz @@ -0,0 +1 @@ +/usr/share/man/de/man1/vim.1.gz \ No newline at end of file diff --git a/alternatives/view.da.1.gz b/alternatives/view.da.1.gz new file mode 120000 index 0000000..c90068f --- /dev/null +++ b/alternatives/view.da.1.gz @@ -0,0 +1 @@ +/usr/share/man/da/man1/vim.1.gz \ No newline at end of file diff --git a/alternatives/view.de.1.gz b/alternatives/view.de.1.gz new file mode 120000 index 0000000..d89833a --- /dev/null +++ b/alternatives/view.de.1.gz @@ -0,0 +1 @@ +/usr/share/man/de/man1/vim.1.gz \ No newline at end of file diff --git a/amavis/conf.d/15-av_scanners b/amavis/conf.d/15-av_scanners index 59ac2f3..1e0b527 100644 --- a/amavis/conf.d/15-av_scanners +++ b/amavis/conf.d/15-av_scanners @@ -247,10 +247,12 @@ use strict; # ["SCAN {}/*\r\n", '127.0.0.1:8448' ], # qr/^200 File OK/m, qr/^201 /m, qr/^201 (.+)/m ], - ### http://www.norman.com/products_nvc.shtml - ['Norman Virus Control v5 / Linux', 'nvcc', - '-c -l:0 -s -u -temp:$TEMPBASE {}', [0,10,11], [1,2,14], - qr/(?i).* virus in .* -> \'(.+)\'/m ], +# Disabled as it conflicts with packaged /usr/bin/nvcc of "nvidia-cuda-toolkit" +# (LP: 1582318) +# ### http://www.norman.com/products_nvc.shtml +# ['Norman Virus Control v5 / Linux', 'nvcc', +# '-c -l:0 -s -u -temp:$TEMPBASE {}', [0,10,11], [1,2,14], +# qr/(?i).* virus in .* -> \'(.+)\'/m ], ### http://www.pandasoftware.com/ ['Panda CommandLineSecure 9 for Linux', diff --git a/amavis/conf.d/20-debian_defaults b/amavis/conf.d/20-debian_defaults index 6016b55..e1c6756 100644 --- a/amavis/conf.d/20-debian_defaults +++ b/amavis/conf.d/20-debian_defaults @@ -66,8 +66,8 @@ $MAX_EXPANSION_QUOTA = 300*1024*1024; # bytes # D_REJECT it (and don't D_REJECT mail coming from your forwarders!). $final_virus_destiny = D_DISCARD; # (data not lost, see virus quarantine) -$final_banned_destiny = D_BOUNCE; # D_REJECT when front-end MTA -$final_spam_destiny = D_BOUNCE; +$final_banned_destiny = D_DISCARD; +$final_spam_destiny = D_PASS; $final_bad_header_destiny = D_PASS; # False-positive prone (for spam) $enable_dkim_verification = 0; #disabled to prevent warning diff --git a/apache2/conf-available/php7.3-fpm.conf b/apache2/conf-available/php7.3-fpm.conf new file mode 100644 index 0000000..ef41022 --- /dev/null +++ b/apache2/conf-available/php7.3-fpm.conf @@ -0,0 +1,23 @@ +# Redirect to local php-fpm if mod_php is not available + + + # Enable http authorization headers + + SetEnvIfNoCase ^Authorization$ "(.+)" HTTP_AUTHORIZATION=$1 + + + + SetHandler "proxy:unix:/run/php/php7.3-fpm.sock|fcgi://localhost" + + + # Deny access to raw php sources by default + # To re-enable it's recommended to enable access to the files + # only in specific virtual host or directory + Require all denied + + # Deny access to files without filename (e.g. '.php') + + Require all denied + + + diff --git a/apache2/mods-available/php7.3.conf b/apache2/mods-available/php7.3.conf new file mode 100644 index 0000000..d4df3e5 --- /dev/null +++ b/apache2/mods-available/php7.3.conf @@ -0,0 +1,25 @@ + + SetHandler application/x-httpd-php + + + SetHandler application/x-httpd-php-source + # Deny access to raw php sources by default + # To re-enable it's recommended to enable access to the files + # only in specific virtual host or directory + Require all denied + +# Deny access to files without filename (e.g. '.php') + + Require all denied + + +# Running PHP scripts in user directories is disabled by default +# +# To re-enable PHP in user directories comment the following lines +# (from to .) Do NOT set it to On as it +# prevents .htaccess files from disabling it. + + + php_admin_flag engine Off + + diff --git a/apache2/mods-available/php7.3.load b/apache2/mods-available/php7.3.load new file mode 100644 index 0000000..2c3982e --- /dev/null +++ b/apache2/mods-available/php7.3.load @@ -0,0 +1,3 @@ +# Conflicts: php5 +# Depends: mpm_prefork +LoadModule php7_module /usr/lib/apache2/modules/libphp7.3.so diff --git a/apparmor.d/force-complain/usr.sbin.chronyd b/apparmor.d/force-complain/usr.sbin.chronyd new file mode 120000 index 0000000..46fe87e --- /dev/null +++ b/apparmor.d/force-complain/usr.sbin.chronyd @@ -0,0 +1 @@ +/etc/apparmor.d/usr.sbin.chronyd \ No newline at end of file diff --git a/apparmor.d/local/usr.bin.man b/apparmor.d/local/usr.bin.man new file mode 100644 index 0000000..e69de29 diff --git a/apparmor.d/local/usr.sbin.chronyd b/apparmor.d/local/usr.sbin.chronyd new file mode 100644 index 0000000..e69de29 diff --git a/apparmor.d/local/usr.sbin.tcpdump b/apparmor.d/local/usr.sbin.tcpdump new file mode 100644 index 0000000..e69de29 diff --git a/apparmor.d/usr.bin.man b/apparmor.d/usr.bin.man new file mode 100644 index 0000000..569aec9 --- /dev/null +++ b/apparmor.d/usr.bin.man @@ -0,0 +1,101 @@ +# vim:syntax=apparmor + +#include + +/usr/bin/man { + #include + + # Use a special profile when man calls anything groff-related. We only + # include the programs that actually parse input data in a non-trivial + # way, not wrappers such as groff and nroff, since the latter would need a + # broader profile. + /usr/bin/eqn rmCx -> &man_groff, + /usr/bin/grap rmCx -> &man_groff, + /usr/bin/pic rmCx -> &man_groff, + /usr/bin/preconv rmCx -> &man_groff, + /usr/bin/refer rmCx -> &man_groff, + /usr/bin/tbl rmCx -> &man_groff, + /usr/bin/troff rmCx -> &man_groff, + /usr/bin/vgrind rmCx -> &man_groff, + + # Similarly, use a special profile when man calls decompressors and other + # simple filters. + /{,usr/}bin/bzip2 rmCx -> &man_filter, + /{,usr/}bin/gzip rmCx -> &man_filter, + /usr/bin/col rmCx -> &man_filter, + /usr/bin/compress rmCx -> &man_filter, + /usr/bin/iconv rmCx -> &man_filter, + /usr/bin/lzip.lzip rmCx -> &man_filter, + /usr/bin/tr rmCx -> &man_filter, + /usr/bin/xz rmCx -> &man_filter, + + # Allow basically anything in terms of file system access, subject to DAC. + # The purpose of this profile isn't to confine man itself (that might be + # nice in the future, but is tricky since it's quite configurable), but to + # confine the processes it calls that parse untrusted data. + /** mrixwlk, + unix, + + capability setuid, + capability setgid, + + signal peer=@{profile_name}, + signal peer=/usr/bin/man//&man_groff, + signal peer=/usr/bin/man//&man_filter, + + # Site-specific additions and overrides. See local/README for details. + #include +} + +profile man_groff { + #include + # Recent kernels revalidate open FDs, and there are often some still + # open on TTYs. This is temporary until man learns to close irrelevant + # open FDs before execve. + #include + # man always runs its groff pipeline with the input file open on stdin, + # so we can skip . + + /usr/bin/eqn rm, + /usr/bin/grap rm, + /usr/bin/pic rm, + /usr/bin/preconv rm, + /usr/bin/refer rm, + /usr/bin/tbl rm, + /usr/bin/troff rm, + /usr/bin/vgrind rm, + + /etc/groff/** r, + /usr/lib/groff/site-tmac/** r, + /usr/share/groff/** r, + + signal peer=/usr/bin/man, + # @{profile_name} doesn't seem to work here. + signal peer=/usr/bin/man//&man_groff, +} + +profile man_filter { + #include + # Recent kernels revalidate open FDs, and there are often some still + # open on TTYs. This is temporary until man learns to close irrelevant + # open FDs before execve. + #include + + /{,usr/}bin/bzip2 rm, + /{,usr/}bin/gzip rm, + /usr/bin/col rm, + /usr/bin/compress rm, + /usr/bin/iconv rm, + /usr/bin/lzip.lzip rm, + /usr/bin/tr rm, + /usr/bin/xz rm, + + # Manual pages can be more or less anywhere, especially with "man -l", and + # there's no harm in allowing wide read access here since the worst it can + # do is feed data to the invoking man process. + /** r, + + signal peer=/usr/bin/man, + # @{profile_name} doesn't seem to work here. + signal peer=/usr/bin/man//&man_filter, +} diff --git a/apparmor.d/usr.sbin.chronyd b/apparmor.d/usr.sbin.chronyd new file mode 100644 index 0000000..74090f0 --- /dev/null +++ b/apparmor.d/usr.sbin.chronyd @@ -0,0 +1,60 @@ +# Last Modified: Sat Jan 20 10:45:05 2018 +#include + +/usr/sbin/chronyd (attach_disconnected) { + #include + #include + + capability sys_time, + capability net_bind_service, + capability setuid, + capability setgid, + capability sys_nice, + capability sys_resource, + # for /run/chrony to be created + capability chown, + # Needed to support HW timestamping + capability net_admin, + + /usr/sbin/chronyd mr, + + /etc/chrony/{,**} r, + /{,var/}run/chronyd.pid w, + /{,var/}run/chrony/{,*} rw, + /var/lib/chrony/{,*} r, + /var/lib/chrony/* w, + /var/log/chrony/{,*} r, + /var/log/chrony/* w, + + # Using the “tempcomp” directive gives chronyd the ability to improve + # the stability and accuracy of the clock by compensating the temperature + # changes measured by a sensor close to the oscillator. + @{sys}/class/hwmon/hwmon[0-9]*/temp[0-9]*_input r, + + # Support all paths suggested in the man page (LP: #1771028). Assume these + # are common use cases; others should be set as local include (see below). + # Configs using a 'chrony.' prefix like the tempcomp config file example + /etc/chrony.* r, + # Example gpsd socket is outside /{,var/}run/chrony/ + /{,var/}run/chrony.tty{,*}.sock rw, + # To sign replies to MS-SNTP clients by the smbd daemon + /var/lib/samba/ntp_signd r, + /var/lib/samba/ntp_signd/{,*} rw, + + # rtc + /etc/adjtime r, + /dev/rtc{,[0-9]*} rw, + + # gps devices + /dev/pps[0-9]* rw, + /dev/ptp[0-9]* rw, + + # For use with clocks that report via shared memory (e.g. gpsd), + # you may need to give ntpd access to all of shared memory, though + # this can be considered dangerous. See https://launchpad.net/bugs/722815 + # for details. To enable, add this to local/usr.sbin.chronyd: + # capability ipc_owner, + + # Site-specific additions and overrides. See local/README for details. + #include +} diff --git a/apparmor.d/usr.sbin.named b/apparmor.d/usr.sbin.named index 43e27c0..a4622da 100644 --- a/apparmor.d/usr.sbin.named +++ b/apparmor.d/usr.sbin.named @@ -2,7 +2,7 @@ # Last Modified: Fri Jun 1 16:43:22 2007 #include -/usr/sbin/named { +/usr/sbin/named flags=(attach_disconnected) { #include #include @@ -22,6 +22,9 @@ /var/cache/bind/** lrw, /var/cache/bind/ rw, + # Database file used by allow-new-zones + /var/cache/bind/_default.nzd-lock rwk, + # gssapi /etc/krb5.keytab kr, /etc/bind/krb5.keytab kr, @@ -29,12 +32,18 @@ # ssl /etc/ssl/openssl.cnf r, + # root hints from dns-data-root + /usr/share/dns/root.* r, + # GeoIP data files for GeoIP ACLs /usr/share/GeoIP/** r, # dnscvsutil package /var/lib/dnscvsutil/compiled/** rw, + # Allow changing worker thread names + owner @{PROC}/@{pid}/task/@{tid}/comm rw, + @{PROC}/net/if_inet6 r, @{PROC}/*/net/if_inet6 r, @{PROC}/sys/net/ipv4/ip_local_port_range r, @@ -62,6 +71,24 @@ # dynamic updates /var/tmp/DNS_* rw, + # dyndb backends + /usr/lib/bind/*.so rm, + + # Samba DLZ + /{usr/,}lib/@{multiarch}/samba/bind9/*.so rm, + /{usr/,}lib/@{multiarch}/samba/gensec/*.so rm, + /{usr/,}lib/@{multiarch}/samba/ldb/*.so rm, + /{usr/,}lib/@{multiarch}/ldb/modules/ldb/*.so rm, + /var/lib/samba/bind-dns/dns.keytab rk, + /var/lib/samba/bind-dns/named.conf r, + /var/lib/samba/bind-dns/dns/** rwk, + /var/lib/samba/private/dns.keytab rk, + /var/lib/samba/private/named.conf r, + /var/lib/samba/private/dns/** rwk, + /etc/samba/smb.conf r, + /dev/urandom rwmk, + owner /var/tmp/krb5_* rwk, + # Site-specific additions and overrides. See local/README for details. #include } diff --git a/apparmor.d/usr.sbin.tcpdump b/apparmor.d/usr.sbin.tcpdump new file mode 100644 index 0000000..7a7da4f --- /dev/null +++ b/apparmor.d/usr.sbin.tcpdump @@ -0,0 +1,63 @@ +# vim:syntax=apparmor +#include + +/usr/sbin/tcpdump { + #include + #include + #include + + capability net_raw, + capability setuid, + capability setgid, + capability dac_override, + network raw, + network packet, + + # for -D + @{PROC}/bus/usb/ r, + @{PROC}/bus/usb/** r, + + # for finding an interface + @{PROC}/[0-9]*/net/dev r, + /sys/bus/usb/devices/ r, + /sys/class/net/ r, + /sys/devices/**/net/* r, + + # for -j + capability net_admin, + + # for tracing USB bus, which libpcap supports + /dev/usbmon* r, + /dev/bus/usb/ r, + /dev/bus/usb/** r, + + # for init_etherarray(), with -e + /etc/ethers r, + + # for USB probing (see libpcap-1.1.x/pcap-usb-linux.c:probe_devices()) + /dev/bus/usb/**/[0-9]* w, + + # for -z + /{usr/,}bin/gzip ixr, + /{usr/,}bin/bzip2 ixr, + + # for -F and -w + audit deny @{HOME}/.* mrwkl, + audit deny @{HOME}/.*/ rw, + audit deny @{HOME}/.*/** mrwkl, + audit deny @{HOME}/bin/ rw, + audit deny @{HOME}/bin/** mrwkl, + owner @{HOME}/ r, + owner @{HOME}/** rw, + + # for -r, -F and -w + /**.[pP][cC][aA][pP] rw, + + # for convenience with -r (ie, read pcap files from other sources) + /var/log/snort/*log* r, + + /usr/sbin/tcpdump mr, + + # Site-specific additions and overrides. See local/README for details. + #include +} diff --git a/apt/apt.conf.d/01autoremove b/apt/apt.conf.d/01autoremove index 3609ca4..f9d9e85 100644 --- a/apt/apt.conf.d/01autoremove +++ b/apt/apt.conf.d/01autoremove @@ -4,6 +4,8 @@ APT { "^firmware-linux.*"; "^linux-firmware$"; + "^linux-image-[a-z0-9]*$"; + "^linux-image-[a-z0-9]*-[a-z0-9]*$"; }; VersionedKernelPackages @@ -12,7 +14,10 @@ APT "linux-image"; "linux-headers"; "linux-image-extra"; + "linux-modules"; + "linux-modules-extra"; "linux-signed-image"; + "linux-image-unsigned"; # kfreebsd kernels "kfreebsd-image"; "kfreebsd-headers"; @@ -22,8 +27,14 @@ APT ".*-modules"; ".*-kernel"; "linux-backports-modules-.*"; + "linux-modules-.*"; # tools "linux-tools"; + "linux-cloud-tools"; + # build info + "linux-buildinfo"; + # source code + "linux-source"; }; Never-MarkAuto-Sections diff --git a/apt/apt.conf.d/01autoremove-kernels b/apt/apt.conf.d/01autoremove-kernels index 5b54bc9..6015b40 100644 --- a/apt/apt.conf.d/01autoremove-kernels +++ b/apt/apt.conf.d/01autoremove-kernels @@ -1,51 +1,65 @@ // DO NOT EDIT! File autogenerated by /etc/kernel/postinst.d/apt-auto-removal APT::NeverAutoRemove { + "^linux-image-4\.19\.0-6-amd64$"; "^linux-image-4\.9\.0-11-amd64$"; - "^linux-image-4\.9\.0-9-amd64$"; + "^linux-headers-4\.19\.0-6-amd64$"; "^linux-headers-4\.9\.0-11-amd64$"; - "^linux-headers-4\.9\.0-9-amd64$"; + "^linux-image-extra-4\.19\.0-6-amd64$"; "^linux-image-extra-4\.9\.0-11-amd64$"; - "^linux-image-extra-4\.9\.0-9-amd64$"; + "^linux-modules-4\.19\.0-6-amd64$"; + "^linux-modules-4\.9\.0-11-amd64$"; + "^linux-modules-extra-4\.19\.0-6-amd64$"; + "^linux-modules-extra-4\.9\.0-11-amd64$"; + "^linux-signed-image-4\.19\.0-6-amd64$"; "^linux-signed-image-4\.9\.0-11-amd64$"; - "^linux-signed-image-4\.9\.0-9-amd64$"; + "^linux-image-unsigned-4\.19\.0-6-amd64$"; + "^linux-image-unsigned-4\.9\.0-11-amd64$"; + "^kfreebsd-image-4\.19\.0-6-amd64$"; "^kfreebsd-image-4\.9\.0-11-amd64$"; - "^kfreebsd-image-4\.9\.0-9-amd64$"; + "^kfreebsd-headers-4\.19\.0-6-amd64$"; "^kfreebsd-headers-4\.9\.0-11-amd64$"; - "^kfreebsd-headers-4\.9\.0-9-amd64$"; + "^gnumach-image-4\.19\.0-6-amd64$"; "^gnumach-image-4\.9\.0-11-amd64$"; - "^gnumach-image-4\.9\.0-9-amd64$"; + "^.*-modules-4\.19\.0-6-amd64$"; "^.*-modules-4\.9\.0-11-amd64$"; - "^.*-modules-4\.9\.0-9-amd64$"; + "^.*-kernel-4\.19\.0-6-amd64$"; "^.*-kernel-4\.9\.0-11-amd64$"; - "^.*-kernel-4\.9\.0-9-amd64$"; + "^linux-backports-modules-.*-4\.19\.0-6-amd64$"; "^linux-backports-modules-.*-4\.9\.0-11-amd64$"; - "^linux-backports-modules-.*-4\.9\.0-9-amd64$"; + "^linux-modules-.*-4\.19\.0-6-amd64$"; + "^linux-modules-.*-4\.9\.0-11-amd64$"; + "^linux-tools-4\.19\.0-6-amd64$"; "^linux-tools-4\.9\.0-11-amd64$"; - "^linux-tools-4\.9\.0-9-amd64$"; + "^linux-cloud-tools-4\.19\.0-6-amd64$"; + "^linux-cloud-tools-4\.9\.0-11-amd64$"; + "^linux-buildinfo-4\.19\.0-6-amd64$"; + "^linux-buildinfo-4\.9\.0-11-amd64$"; + "^linux-source-4\.19\.0-6-amd64$"; + "^linux-source-4\.9\.0-11-amd64$"; }; /* Debug information: # dpkg list: -iF linux-image-4.9.0-11-amd64 4.9.189-3+deb9u1 amd64 Linux 4.9 for 64-bit PCs -ii linux-image-4.9.0-8-amd64 4.9.144-3.1 amd64 Linux 4.9 for 64-bit PCs -ii linux-image-4.9.0-9-amd64 4.9.168-1+deb9u5 amd64 Linux 4.9 for 64-bit PCs -iU linux-image-amd64 4.9+80+deb9u9 amd64 Linux for 64-bit PCs (meta-package) +iF linux-image-4.19.0-6-amd64 4.19.67-2+deb10u1 amd64 Linux 4.19 for 64-bit PCs (signed) +ii linux-image-4.9.0-11-amd64 4.9.189-3+deb9u1 amd64 Linux 4.9 for 64-bit PCs +ii linux-image-4.9.0-9-amd64 4.9.168-1+deb9u5 amd64 Linux 4.9 for 64-bit PCs +iU linux-image-amd64 4.19+105+deb10u1 amd64 Linux for 64-bit PCs (meta-package) # list of installed kernel packages: +4.19.0-6-amd64 4.19.67-2+deb10u1 4.9.0-11-amd64 4.9.189-3+deb9u1 -4.9.0-8-amd64 4.9.144-3.1 4.9.0-9-amd64 4.9.168-1+deb9u5 # list of different kernel versions: +4.19.67-2+deb10u1 4.9.189-3+deb9u1 4.9.168-1+deb9u5 -4.9.144-3.1 -# Installing kernel: 4.9.189-3+deb9u1 (4.9.0-11-amd64) -# Running kernel: 4.9.168-1+deb9u5 (4.9.0-9-amd64) -# Last kernel: 4.9.189-3+deb9u1 -# Previous kernel: 4.9.168-1+deb9u5 +# Installing kernel: 4.19.67-2+deb10u1 (4.19.0-6-amd64) +# Running kernel: 4.9.189-3+deb9u1 (4.9.0-11-amd64) +# Last kernel: 4.19.67-2+deb10u1 +# Previous kernel: 4.9.189-3+deb9u1 # Kernel versions list to keep: -4.9.168-1+deb9u5 +4.19.67-2+deb10u1 4.9.189-3+deb9u1 # Kernel packages (version part) to protect: +4\.19\.0-6-amd64 4\.9\.0-11-amd64 -4\.9\.0-9-amd64 */ diff --git a/apt/listchanges.conf b/apt/listchanges.conf index 28cb19a..5f4e340 100644 --- a/apt/listchanges.conf +++ b/apt/listchanges.conf @@ -4,4 +4,7 @@ confirm=false email_address=root save_seen=/var/lib/apt/listchanges.db which=news +email_format=text +headers=false +reverse=false diff --git a/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg b/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg index d2f4ffa..9ff7af7 100644 Binary files a/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg and b/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg differ diff --git a/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg b/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg index f094b66..81afdb7 100644 Binary files a/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg and b/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg differ diff --git a/apt/trusted.gpg.d/debian-archive-buster-stable.gpg b/apt/trusted.gpg.d/debian-archive-buster-stable.gpg index 7dbe646..6990f45 100644 Binary files a/apt/trusted.gpg.d/debian-archive-buster-stable.gpg and b/apt/trusted.gpg.d/debian-archive-buster-stable.gpg differ diff --git a/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg b/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg index fa4047c..c236291 100644 Binary files a/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg and b/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg differ diff --git a/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg b/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg index c454a76..ac09922 100644 Binary files a/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg and b/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg differ diff --git a/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg b/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg index dcb5524..fd22f25 100644 Binary files a/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg and b/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg differ diff --git a/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg b/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg index 7dc19c5..81b99e4 100644 Binary files a/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg and b/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg differ diff --git a/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg b/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg index 79542e0..fd24510 100644 Binary files a/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg and b/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg differ diff --git a/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg b/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg index 2c3f78f..046cf38 100644 Binary files a/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg and b/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg differ diff --git a/apticron/README b/apticron/README new file mode 100644 index 0000000..62c4295 --- /dev/null +++ b/apticron/README @@ -0,0 +1,6 @@ +Any settings in a named 'apticron.conf' file in this directory will override +the default apticron options. You may want to copy the original +'/usr/lib/apticron/apticron.conf' in here and use it as a base. + +*Do not* edit the original /usr/lib/apticron/apticron.conf, or you will lose +your local settings during the next apticron upgrade. diff --git a/bash.bashrc b/bash.bashrc index 54687b1..7fabe82 100644 --- a/bash.bashrc +++ b/bash.bashrc @@ -16,7 +16,10 @@ if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; then fi # set a fancy prompt (non-color, overwrite the one in /etc/profile) -PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ ' +# but only if not SUDOing and have SUDO_PS1 set; then assume smart user. +if ! [ -n "${SUDO_USER}" -a -n "${SUDO_PS1}" ]; then + PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ ' +fi # Commented out, don't overwrite xterm -T "title" -n "icontitle" by default. # If this is an xterm set the title to user@host:dir diff --git a/bash_completion.d/fail2ban b/bash_completion.d/fail2ban index 36e0cbb..b888700 100644 --- a/bash_completion.d/fail2ban +++ b/bash_completion.d/fail2ban @@ -108,7 +108,7 @@ _fail2ban () { ;; logtarget) if [[ "$cmd" == "set" ]];then - COMPREPLY=( $( compgen -W "STDOUT STDERR SYSLOG" -- "$cur" ) ) + COMPREPLY=( $( compgen -W "STDOUT STDERR SYSLOG SYSOUT" -- "$cur" ) ) _filedir # And files fi return 0 diff --git a/bash_completion.d/grub b/bash_completion.d/grub deleted file mode 100644 index 29a5963..0000000 --- a/bash_completion.d/grub +++ /dev/null @@ -1,495 +0,0 @@ -# -# Bash completion for grub -# -# Copyright (C) 2010 Free Software Foundation, Inc. -# -# GRUB is free software: you can redistribute it and/or modify -# it under the terms of the GNU General Public License as published by -# the Free Software Foundation, either version 3 of the License, or -# (at your option) any later version. -# -# GRUB is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with GRUB. If not, see . -# bash completion for grub - -__grub_dir() { - local i c=1 boot_dir - - for (( c=1; c <= ${#COMP_WORDS[@]}; c++ )); do - i="${COMP_WORDS[c]}" - case "$i" in - --boot-directory) - c=$((++c)) - i="${COMP_WORDS[c]}" - boot_dir="${i##*=}"; - break - ;; - esac - done - boot_dir=${boot_dir-/boot} - echo "${boot_dir%/}/grub" -} - - -# This function generates completion reply with compgen -# - arg: accepts 1, 2, 3, or 4 arguments -# $1 wordlist separate by space, tab or newline -# $2 (optional) prefix to add -# $3 (optional) current word to complete -# $4 (optional) suffix to add -__grubcomp () { - local cur="${COMP_WORDS[COMP_CWORD]}" - if [ $# -gt 2 ]; then - cur="$3" - fi - case "$cur" in - --*=) - COMPREPLY=() - ;; - *) - local IFS=' '$'\t'$'\n' - COMPREPLY=($(compgen -P "${2-}" -W "${1-}" -S "${4-}" -- "$cur")) - ;; - esac -} - -# Function that return long options from the help of the command -# - arg: $1 (optional) command to get the long options from -__grub_get_options_from_help () { - local prog - - if [ $# -ge 1 ]; then - prog="$1" - else - prog="${COMP_WORDS[0]}" - fi - - local i IFS=" "$'\t'$'\n' - for i in $(LC_ALL=C $prog --help) - do - case $i in - --*) echo "${i%=*}";; - esac - done -} - -# Function that return long options from the usage of the command -# - arg: $1 (optional) command to get the long options from -__grub_get_options_from_usage () { - local prog - - if [ $# -ge 1 ]; then - prog="$1" - else - prog="${COMP_WORDS[0]}" - fi - - local i IFS=" "$'\t'$'\n' - for i in $(LC_ALL=C $prog --usage) - do - case $i in - \[--*\]) i=${i#[} # Remove leading [ - echo ${i%%?(=*)]} # Remove optional value and trailing ] - ;; - esac - done -} - -__grub_get_last_option () { - local i - for (( i=$COMP_CWORD-1; i > 0; i-- )); do - if [[ "${COMP_WORDS[i]}" == -* ]]; then - echo "${COMP_WORDS[i]}" - break; - fi - done -} - -__grub_list_menuentries () { - local cur="${COMP_WORDS[COMP_CWORD]}" - local config_file=$(__grub_dir)/grub.cfg - - if [ -f "$config_file" ];then - local IFS=$'\n' - COMPREPLY=( $(compgen \ - -W "$( awk -F "[\"']" '/menuentry/ { print $2 }' $config_file )" \ - -- "$cur" )) #'# Help emacs syntax highlighting - fi -} - -__grub_list_modules () { - local grub_dir=$(__grub_dir) - local IFS=$'\n' - COMPREPLY=( $( compgen -f -X '!*/*.mod' -- "${grub_dir}/$cur" | { - while read -r tmp; do - [ -n $tmp ] && { - tmp=${tmp##*/} - printf '%s\n' ${tmp%.mod} - } - done - } - )) -} - -# -# grub-set-default & grub-reboot -# -_grub_set_entry () { - local cur prev split=false - - COMPREPLY=() - cur=`_get_cword` - prev=${COMP_WORDS[COMP_CWORD-1]} - - _split_longopt && split=true - - case "$prev" in - --boot-directory) - _filedir -d - return - ;; - esac - - $split && return 0 - - if [[ "$cur" == -* ]]; then - __grubcomp "$(__grub_get_options_from_help)" - else - # Default complete with a menuentry - __grub_list_menuentries - fi -} - -__grub_set_default_program="grub-set-default" -have ${__grub_set_default_program} && \ - complete -F _grub_set_entry -o filenames ${__grub_set_default_program} -unset __grub_set_default_program - -__grub_reboot_program="grub-reboot" -have ${__grub_reboot_program} && \ - complete -F _grub_set_entry -o filenames ${__grub_reboot_program} -unset __grub_reboot_program - - -# -# grub-editenv -# -_grub_editenv () { - local cur prev - - COMPREPLY=() - cur=`_get_cword` - prev=${COMP_WORDS[COMP_CWORD-1]} - - case "$prev" in - create|list|set|unset) - COMPREPLY=( "" ) - return - ;; - esac - - __grubcomp "$(__grub_get_options_from_help) - create list set unset" -} - -__grub_editenv_program="grub-editenv" -have ${__grub_editenv_program} && \ - complete -F _grub_editenv -o filenames ${__grub_editenv_program} -unset __grub_editenv_program - - -# -# grub-mkconfig -# -_grub_mkconfig () { - local cur prev - - COMPREPLY=() - cur=`_get_cword` - - if [[ "$cur" == -* ]]; then - __grubcomp "$(__grub_get_options_from_help)" - else - _filedir - fi -} -__grub_mkconfig_program="grub-mkconfig" -have ${__grub_mkconfig_program} && \ - complete -F _grub_mkconfig -o filenames ${__grub_mkconfig_program} -unset __grub_mkconfig_program - - -# -# grub-setup -# -_grub_setup () { - local cur prev split=false - - COMPREPLY=() - cur=`_get_cword` - prev=${COMP_WORDS[COMP_CWORD-1]} - - _split_longopt && split=true - - case "$prev" in - -d|--directory) - _filedir -d - return - ;; - esac - - $split && return 0 - - if [[ "$cur" == -* ]]; then - __grubcomp "$(__grub_get_options_from_help)" - else - # Default complete with a filename - _filedir - fi -} - -__grub_bios_setup_program="grub-bios-setup" -have ${__grub_bios_setup_program} && \ - complete -F _grub_setup -o filenames ${__grub_bios_setup_program} -unset __grub_bios_setup_program - -__grub_sparc64_setup_program="grub-sparc64-setup" -have ${__grub_sparc64_setup_program} && \ - complete -F _grub_setup -o filenames ${__grub_sparc64_setup_program} -unset __grub_sparc64_setup_program - - -# -# grub-install -# -_grub_install () { - local cur prev last split=false - - COMPREPLY=() - cur=`_get_cword` - prev=${COMP_WORDS[COMP_CWORD-1]} - last=$(__grub_get_last_option) - - _split_longopt && split=true - - case "$prev" in - --boot-directory) - _filedir -d - return - ;; - --disk-module) - __grubcomp "biosdisk ata" - return - ;; - esac - - $split && return 0 - - if [[ "$cur" == -* ]]; then - __grubcomp "$(__grub_get_options_from_help)" - else - case "$last" in - --modules) - __grub_list_modules - return - ;; - esac - - # Default complete with a filename - _filedir - fi -} -__grub_install_program="grub-install" -have ${__grub_install_program} && \ - complete -F _grub_install -o filenames ${__grub_install_program} -unset __grub_install_program - - -# -# grub-mkfont -# -_grub_mkfont () { - local cur - - COMPREPLY=() - cur=`_get_cword` - - if [[ "$cur" == -* ]]; then - __grubcomp "$(__grub_get_options_from_help)" - else - # Default complete with a filename - _filedir - fi -} -__grub_mkfont_program="grub-mkfont" -have ${__grub_mkfont_program} && \ - complete -F _grub_mkfont -o filenames ${__grub_mkfont_program} -unset __grub_mkfont_program - - -# -# grub-mkrescue -# -_grub_mkrescue () { - local cur prev last - - COMPREPLY=() - cur=`_get_cword` - prev=${COMP_WORDS[COMP_CWORD-1]} - last=$(__grub_get_last_option) - - if [[ "$cur" == -* ]]; then - __grubcomp "$(__grub_get_options_from_help)" - else - case "$last" in - --modules) - __grub_list_modules - return - ;; - esac - - # Default complete with a filename - _filedir - fi -} -__grub_mkrescue_program="grub-mkrescue" -have ${__grub_mkrescue_program} && \ - complete -F _grub_mkrescue -o filenames ${__grub_mkrescue_program} -unset __grub_mkrescue_program - - -# -# grub-mkimage -# -_grub_mkimage () { - local cur prev split=false - - COMPREPLY=() - cur=`_get_cword` - prev=${COMP_WORDS[COMP_CWORD-1]} - - _split_longopt && split=true - - case "$prev" in - -d|--directory|-p|--prefix) - _filedir -d - return - ;; - -O|--format) - # Get available format from help - local prog=${COMP_WORDS[0]} - __grubcomp "$(LC_ALL=C $prog --help | \ - awk -F ":" '/available formats/ { print $2 }' | \ - sed 's/, / /g')" - return - ;; - esac - - $split && return 0 - - if [[ "$cur" == -* ]]; then - __grubcomp "$(__grub_get_options_from_help)" - else - # Default complete with a filename - _filedir - fi -} -__grub_mkimage_program="grub-mkimage" -have ${__grub_mkimage_program} && \ - complete -F _grub_mkimage -o filenames ${__grub_mkimage_program} -unset __grub_mkimage_program - - -# -# grub-mkpasswd-pbkdf2 -# -_grub_mkpasswd_pbkdf2 () { - local cur - - COMPREPLY=() - cur=`_get_cword` - - if [[ "$cur" == -* ]]; then - __grubcomp "$(__grub_get_options_from_help)" - else - # Default complete with a filename - _filedir - fi -} -__grub_mkpasswd_pbkdf2_program="grub-mkpasswd-pbkdf2" -have ${__grub_mkpasswd_pbkdf2_program} && \ - complete -F _grub_mkpasswd_pbkdf2 -o filenames ${__grub_mkpasswd_pbkdf2_program} -unset __grub_mkpasswd_pbkdf2_program - - -# -# grub-probe -# -_grub_probe () { - local cur prev split=false - - COMPREPLY=() - cur=`_get_cword` - prev=${COMP_WORDS[COMP_CWORD-1]} - - _split_longopt && split=true - - case "$prev" in - -t|--target) - # Get target type from help - local prog=${COMP_WORDS[0]} - __grubcomp "$(LC_ALL=C $prog --help | \ - awk -F "[()]" '/--target=/ { print $2 }' | \ - sed 's/|/ /g')" - return - ;; - esac - - $split && return 0 - - if [[ "$cur" == -* ]]; then - __grubcomp "$(__grub_get_options_from_help)" - else - # Default complete with a filename - _filedir - fi -} -__grub_probe_program="grub-probe" -have ${__grub_probe_program} && \ - complete -F _grub_probe -o filenames ${__grub_probe_program} -unset __grub_probe_program - - -# -# grub-script-check -# -_grub_script_check () { - local cur - - COMPREPLY=() - cur=`_get_cword` - - if [[ "$cur" == -* ]]; then - __grubcomp "$(__grub_get_options_from_help)" - else - # Default complete with a filename - _filedir - fi -} -__grub_script_check_program="grub-script-check" -have ${__grub_script_check_program} && \ - complete -F _grub_script_check -o filenames ${__grub_script_check_program} - - -# Local variables: -# mode: shell-script -# sh-basic-offset: 4 -# sh-indent-comment: t -# indent-tabs-mode: nil -# End: -# ex: ts=4 sw=4 et filetype=sh diff --git a/bash_completion.d/tig b/bash_completion.d/tig deleted file mode 100644 index 8b4adc5..0000000 --- a/bash_completion.d/tig +++ /dev/null @@ -1,273 +0,0 @@ -## -# bash completion support for tig -# -# Copyright (C) 2007-2010 Jonas fonseca -# Copyright (C) 2006,2007 Shawn Pearce -# -# Based git's git-completion.sh: http://repo.or.cz/w/git/fastimport.git -# -# The contained completion routines provide support for completing: -# -# *) local and remote branch names -# *) local and remote tag names -# *) tig 'subcommands' -# *) tree paths within 'ref:path/to/file' expressions -# -# To use these routines: -# -# 1) Copy this file to somewhere (e.g. ~/.tig-completion.sh). -# 2) Added the following line to your .bashrc: -# source ~/.tig-completion.sh -# -# 3) You may want to make sure the git executable is available -# in your PATH before this script is sourced, as some caching -# is performed while the script loads. If git isn't found -# at source time then all lookups will be done on demand, -# which may be slightly slower. -# - -__tigdir () -{ - if [ -z "$1" ]; then - if [ -n "$__git_dir" ]; then - echo "$__git_dir" - elif [ -d .git ]; then - echo .git - else - git rev-parse --git-dir 2>/dev/null - fi - elif [ -d "$1/.git" ]; then - echo "$1/.git" - else - echo "$1" - fi -} - -_tigcomp () -{ - local all c s=$'\n' IFS=' '$'\t'$'\n' - local cur="${COMP_WORDS[COMP_CWORD]}" - if [ $# -gt 2 ]; then - cur="$3" - fi - for c in $1; do - case "$c$4" in - --*=*) all="$all$c$4$s" ;; - *.) all="$all$c$4$s" ;; - *) all="$all$c$4 $s" ;; - esac - done - IFS=$s - COMPREPLY=($(compgen -P "$2" -W "$all" -- "$cur")) - return -} - -__tig_refs () -{ - local cmd i is_hash=y dir="$(__tigdir "$1")" - if [ -d "$dir" ]; then - for i in HEAD FETCH_HEAD ORIG_HEAD MERGE_HEAD; do - if [ -e "$dir/$i" ]; then echo $i; fi - done - for i in $(git --git-dir="$dir" \ - for-each-ref --format='%(refname)' \ - refs/tags refs/heads refs/remotes); do - case "$i" in - refs/tags/*) echo "${i#refs/tags/}" ;; - refs/heads/*) echo "${i#refs/heads/}" ;; - refs/remotes/*) echo "${i#refs/remotes/}" ;; - *) echo "$i" ;; - esac - done - return - fi - for i in $(git-ls-remote "$dir" 2>/dev/null); do - case "$is_hash,$i" in - y,*) is_hash=n ;; - n,*^{}) is_hash=y ;; - n,refs/tags/*) is_hash=y; echo "${i#refs/tags/}" ;; - n,refs/heads/*) is_hash=y; echo "${i#refs/heads/}" ;; - n,refs/remotes/*) is_hash=y; echo "${i#refs/remotes/}" ;; - n,*) is_hash=y; echo "$i" ;; - esac - done -} - -__tig_complete_file () -{ - local pfx ls ref cur="${COMP_WORDS[COMP_CWORD]}" - case "$cur" in - ?*:*) - ref="${cur%%:*}" - cur="${cur#*:}" - case "$cur" in - ?*/*) - pfx="${cur%/*}" - cur="${cur##*/}" - ls="$ref:$pfx" - pfx="$pfx/" - ;; - *) - ls="$ref" - ;; - esac - COMPREPLY=($(compgen -P "$pfx" \ - -W "$(git --git-dir="$(__tigdir)" ls-tree "$ls" \ - | sed '/^100... blob /s,^.* ,, - /^040000 tree /{ - s,^.* ,, - s,$,/, - } - s/^.* //')" \ - -- "$cur")) - ;; - *) - _tigcomp "$(__tig_refs)" - ;; - esac -} - -__tig_complete_revlist () -{ - local pfx cur="${COMP_WORDS[COMP_CWORD]}" - case "$cur" in - *...*) - pfx="${cur%...*}..." - cur="${cur#*...}" - _tigcomp "$(__tig_refs)" "$pfx" "$cur" - ;; - *..*) - pfx="${cur%..*}.." - cur="${cur#*..}" - _tigcomp "$(__tig_refs)" "$pfx" "$cur" - ;; - *.) - _tigcomp "$cur." - ;; - *) - _tigcomp "$(__tig_refs)" - ;; - esac -} - -_tig_options () -{ - local cur="${COMP_WORDS[COMP_CWORD]}" - case "$cur" in - --pretty=*) - _tigcomp " - oneline short medium full fuller email raw - " "" "${cur##--pretty=}" - return - ;; - --*) - _tigcomp " - --max-count= --max-age= --since= --after= - --min-age= --before= --until= - --root --not --topo-order --date-order - --no-merges - --abbrev-commit --abbrev= - --relative-date - --author= --committer= --grep= - --all-match - --pretty= --name-status --name-only - --not --all - --help --version - " - return - ;; - -*) - _tigcomp "-v -h" - return - ;; - esac - __tig_complete_revlist -} - -_tig_blame () -{ - local reply="" ref=HEAD cur="${COMP_WORDS[COMP_CWORD]}" - - if test "$COMP_CWORD" -lt 3; then - reply="$(__tig_refs)" - else - ref="${COMP_WORDS[2]}" - fi - - reply="$reply $(git --git-dir="$(__tigdir)" ls-tree "$ref" \ - | sed '/^100... blob /s,^.* ,, - /^040000 tree /{ - s,^.* ,, - s,$,/, - } - s/^.* //')" - _tigcomp "$reply" -} - -_tig_show () -{ - local cur="${COMP_WORDS[COMP_CWORD]}" - case "$cur" in - --pretty=*) - _tigcomp " - oneline short medium full fuller email raw - " "" "${cur##--pretty=}" - return - ;; - --*) - _tigcomp "--pretty=" - return - ;; - esac - __tig_complete_file -} - -_tig () -{ - local i c=1 command __tig_dir - - while [ $c -lt $COMP_CWORD ]; do - i="${COMP_WORDS[c]}" - case "$i" in - --) command="log"; break;; - -*) ;; - *) command="$i"; break ;; - esac - c=$((++c)) - done - - if [ $c -eq $COMP_CWORD -a -z "$command" ]; then - case "${COMP_WORDS[COMP_CWORD]}" in - --*=*) COMPREPLY=() ;; - -*) _tig_options ;; - *) _tigcomp "blame status show log stash grep $(__tig_refs)" ;; - esac - return - fi - - case "$command" in - blame) _tig_blame ;; - show) _tig_show ;; - status) ;; - *) _tigcomp " - $(__tig_complete_file) - $(__tig_refs) - " ;; - esac -} - -# Detect if current shell is ZSH, and if so, load this file in bash -# compatibility mode. -if [ -n "$ZSH_VERSION" ]; then - autoload bashcompinit - bashcompinit -fi - -complete -o default -o nospace -F _tig tig - -# The following are necessary only for Cygwin, and only are needed -# when the user has tab-completed the executable name and consequently -# included the '.exe' suffix. -if [ Cygwin = "$(uname -o 2>/dev/null)" ]; then -complete -o default -o nospace -F _tig tig.exe -fi diff --git a/bind/bind.keys b/bind/bind.keys index db22d4b..5e5a32b 100644 --- a/bind/bind.keys +++ b/bind/bind.keys @@ -1,45 +1,26 @@ # The bind.keys file is used to override the built-in DNSSEC trust anchors -# which are included as part of BIND 9. As of the current release, the only -# trust anchors it contains are those for the DNS root zone ("."), and for -# the ISC DNSSEC Lookaside Validation zone ("dlv.isc.org"). Trust anchors -# for any other zones MUST be configured elsewhere; if they are configured -# here, they will not be recognized or used by named. +# which are included as part of BIND 9. The only trust anchors it contains +# are for the DNS root zone ("."). Trust anchors for any other zones MUST +# be configured elsewhere; if they are configured here, they will not be +# recognized or used by named. # # The built-in trust anchors are provided for convenience of configuration. # They are not activated within named.conf unless specifically switched on. -# To use the built-in root key, set "dnssec-validation auto;" in -# named.conf options. To use the built-in DLV key, set -# "dnssec-lookaside auto;". Without these options being set, -# the keys in this file are ignored. +# To use the built-in key, use "dnssec-validation auto;" in the +# named.conf options. Without this option being set, the keys in this +# file are ignored. # # This file is NOT expected to be user-configured. # -# These keys are current as of Feburary 2017. If any key fails to +# These keys are current as of October 2017. If any key fails to # initialize correctly, it may have expired. In that event you should # replace this file with a current version. The latest version of # bind.keys can always be obtained from ISC at https://www.isc.org/bind-keys. +# +# See https://data.iana.org/root-anchors/root-anchors.xml +# for current trust anchor information for the root zone. managed-keys { - # ISC DLV: See https://www.isc.org/solutions/dlv for details. - # - # NOTE: The ISC DLV zone is being phased out as of February 2017; - # the key will remain in place but the zone will be otherwise empty. - # Configuring "dnssec-lookaside auto;" to activate this key is - # harmless, but is no longer useful and is not recommended. - dlv.isc.org. initial-key 257 3 5 "BEAAAAPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2 - brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+ - 1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te9fZ2kJb56dhgMde5 - ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URk - Y62ZfkLoBAADLHQ9IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboM - QKtUdvNXDrYJDSHZws3xiRXF1Rf+al9UmZfSav/4NWLKjHzpT59k/VSt - TDN0YUuWrBNh"; - - # ROOT KEYS: See https://data.iana.org/root-anchors/root-anchors.xml - # for current trust anchor information. - # - # These keys are activated by setting "dnssec-validation auto;" - # in named.conf. - # # This key (19036) is to be phased out starting in 2017. It will # remain in the root zone for some time after its successor key # has been added. It will remain this file until it is removed from @@ -52,7 +33,7 @@ managed-keys { Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0="; - # This key (20326) is to be published in the root zone in 2017. + # This key (20326) was published in the root zone in 2017. # Servers which were already using the old key (19036) should # roll seamlessly to this new one via RFC 5011 rollover. Servers # being set up for the first time can use the contents of this diff --git a/ca-certificates.conf b/ca-certificates.conf index eafab95..d8feb75 100644 --- a/ca-certificates.conf +++ b/ca-certificates.conf @@ -11,10 +11,10 @@ # mozilla/ACCVRAIZ1.crt !mozilla/ACEDICOM_Root.crt -mozilla/AC_Raíz_Certicámara_S.A..crt +!mozilla/AC_Raíz_Certicámara_S.A..crt mozilla/Actalis_Authentication_Root_CA.crt mozilla/AddTrust_External_Root.crt -mozilla/AddTrust_Low-Value_Services_Root.crt +!mozilla/AddTrust_Low-Value_Services_Root.crt !mozilla/AddTrust_Public_Services_Root.crt !mozilla/AddTrust_Qualified_Certificates_Root.crt mozilla/AffirmTrust_Commercial.crt @@ -31,8 +31,8 @@ mozilla/Buypass_Class_3_Root_CA.crt !mozilla/CA_Disig.crt !mozilla/CA_Disig_Root_R1.crt mozilla/CA_Disig_Root_R2.crt -mozilla/Camerfirma_Chambers_of_Commerce_Root.crt -mozilla/Camerfirma_Global_Chambersign_Root.crt +!mozilla/Camerfirma_Chambers_of_Commerce_Root.crt +!mozilla/Camerfirma_Global_Chambersign_Root.crt !mozilla/CA_WoSign_ECC_Root.crt !mozilla/Certification_Authority_of_WoSign_G2.crt mozilla/Certigna.crt @@ -40,7 +40,7 @@ mozilla/Certigna.crt mozilla/Certinomis_-_Root_CA.crt mozilla/Certplus_Class_2_Primary_CA.crt mozilla/certSIGN_ROOT_CA.crt -mozilla/Certum_Root_CA.crt +!mozilla/Certum_Root_CA.crt mozilla/Certum_Trusted_Network_CA.crt mozilla/CFCA_EV_ROOT.crt mozilla/Chambers_of_Commerce_Root_-_2008.crt @@ -52,7 +52,7 @@ mozilla/COMODO_ECC_Certification_Authority.crt mozilla/COMODO_RSA_Certification_Authority.crt !mozilla/Comodo_Secure_Services_root.crt !mozilla/Comodo_Trusted_Services_root.crt -mozilla/ComSign_CA.crt +!mozilla/ComSign_CA.crt mozilla/Cybertrust_Global_Root.crt mozilla/Deutsche_Telekom_Root_CA_2.crt mozilla/DigiCert_Assured_ID_Root_CA.crt @@ -139,15 +139,15 @@ mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt !mozilla/StartCom_Certification_Authority.crt !mozilla/StartCom_Certification_Authority_G2.crt !mozilla/S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN.crt -mozilla/S-TRUST_Universal_Root_CA.crt +!mozilla/S-TRUST_Universal_Root_CA.crt !mozilla/Swisscom_Root_CA_1.crt -mozilla/Swisscom_Root_CA_2.crt +!mozilla/Swisscom_Root_CA_2.crt !mozilla/Swisscom_Root_EV_CA_2.crt mozilla/SwissSign_Gold_CA_-_G2.crt -mozilla/SwissSign_Platinum_CA_-_G2.crt +!mozilla/SwissSign_Platinum_CA_-_G2.crt mozilla/SwissSign_Silver_CA_-_G2.crt mozilla/Taiwan_GRCA.crt -mozilla/TC_TrustCenter_Class_3_CA_II.crt +!mozilla/TC_TrustCenter_Class_3_CA_II.crt mozilla/TeliaSonera_Root_CA_v1.crt mozilla/thawte_Primary_Root_CA.crt mozilla/thawte_Primary_Root_CA_-_G2.crt @@ -157,19 +157,19 @@ mozilla/T-TeleSec_GlobalRoot_Class_2.crt mozilla/T-TeleSec_GlobalRoot_Class_3.crt !mozilla/TÜBİTAK_UEKAE_Kök_Sertifika_Hizmet_Sağlayıcısı_-_Sürüm_3.crt !mozilla/TURKTRUST_Certificate_Services_Provider_Root_2007.crt -mozilla/TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H5.crt +!mozilla/TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H5.crt !mozilla/TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H6.crt mozilla/TWCA_Global_Root_CA.crt mozilla/TWCA_Root_Certification_Authority.crt mozilla/USERTrust_ECC_Certification_Authority.crt mozilla/USERTrust_RSA_Certification_Authority.crt -mozilla/UTN_USERFirst_Email_Root_CA.crt +!mozilla/UTN_USERFirst_Email_Root_CA.crt !mozilla/UTN_USERFirst_Hardware_Root_CA.crt !mozilla/Verisign_Class_1_Public_Primary_Certification_Authority.crt !mozilla/Verisign_Class_1_Public_Primary_Certification_Authority_-_G2.crt -mozilla/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.crt +!mozilla/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.crt !mozilla/Verisign_Class_2_Public_Primary_Certification_Authority_-_G2.crt -mozilla/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.crt +!mozilla/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.crt !mozilla/Verisign_Class_3_Public_Primary_Certification_Authority_2.crt !mozilla/Verisign_Class_3_Public_Primary_Certification_Authority.crt !mozilla/Verisign_Class_3_Public_Primary_Certification_Authority_-_G2.crt @@ -177,39 +177,41 @@ mozilla/Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.crt mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt mozilla/VeriSign_Universal_Root_Certification_Authority.crt -mozilla/Visa_eCommerce_Root.crt +!mozilla/Visa_eCommerce_Root.crt !mozilla/WellsSecure_Public_Root_Certificate_Authority.crt !mozilla/WoSign_China.crt !mozilla/WoSign.crt mozilla/XRamp_Global_CA_Root.crt !spi-inc.org/spi-cacert-2008.crt -mozilla/Certplus_Root_CA_G1.crt -mozilla/Certplus_Root_CA_G2.crt +!mozilla/Certplus_Root_CA_G1.crt +!mozilla/Certplus_Root_CA_G2.crt mozilla/Certum_Trusted_Network_CA_2.crt mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt mozilla/ISRG_Root_X1.crt -mozilla/OpenTrust_Root_CA_G1.crt -mozilla/OpenTrust_Root_CA_G2.crt -mozilla/OpenTrust_Root_CA_G3.crt +!mozilla/OpenTrust_Root_CA_G1.crt +!mozilla/OpenTrust_Root_CA_G2.crt +!mozilla/OpenTrust_Root_CA_G3.crt mozilla/SZAFIR_ROOT_CA2.crt mozilla/AC_RAIZ_FNMT-RCM.crt mozilla/Amazon_Root_CA_1.crt mozilla/Amazon_Root_CA_2.crt mozilla/Amazon_Root_CA_3.crt mozilla/Amazon_Root_CA_4.crt -mozilla/D-TRUST_Root_CA_3_2013.crt +!mozilla/D-TRUST_Root_CA_3_2013.crt mozilla/GDCA_TrustAUTH_R5_ROOT.crt mozilla/LuxTrust_Global_Root_2.crt mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt mozilla/SSL.com_Root_Certification_Authority_ECC.crt mozilla/SSL.com_Root_Certification_Authority_RSA.crt -mozilla/Symantec_Class_1_Public_Primary_Certification_Authority_-_G4.crt -mozilla/Symantec_Class_1_Public_Primary_Certification_Authority_-_G6.crt -mozilla/Symantec_Class_2_Public_Primary_Certification_Authority_-_G4.crt -mozilla/Symantec_Class_2_Public_Primary_Certification_Authority_-_G6.crt +!mozilla/Symantec_Class_1_Public_Primary_Certification_Authority_-_G4.crt +!mozilla/Symantec_Class_1_Public_Primary_Certification_Authority_-_G6.crt +!mozilla/Symantec_Class_2_Public_Primary_Certification_Authority_-_G4.crt +!mozilla/Symantec_Class_2_Public_Primary_Certification_Authority_-_G6.crt mozilla/TrustCor_ECA-1.crt mozilla/TrustCor_RootCert_CA-1.crt mozilla/TrustCor_RootCert_CA-2.crt mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt +mozilla/GlobalSign_Root_CA_-_R6.crt +mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt diff --git a/ca-certificates/update.d/jks-keystore b/ca-certificates/update.d/jks-keystore index 4883920..e0c3445 100755 --- a/ca-certificates/update.d/jks-keystore +++ b/ca-certificates/update.d/jks-keystore @@ -40,25 +40,17 @@ for jvm in java-7-openjdk-$arch java-7-openjdk \ java-8-openjdk-$arch java-8-openjdk \ oracle-java8-jre-$arch oracle-java8-server-jre-$arch oracle-java8-jdk-$arch \ java-9-openjdk-$arch java-9-openjdk \ - oracle-java9-jre-$arch oracle-java9-server-jre-$arch oracle-java9-jdk-$arch; do -if [ -x /usr/lib/jvm/$jvm/bin/java ]; then + oracle-java9-jre-$arch oracle-java9-server-jre-$arch oracle-java9-jdk-$arch \ + java-10-openjdk-$arch java-10-openjdk \ + oracle-java10-jre-$arch oracle-java10-server-jre-$arch oracle-java10-jdk-$arch \ + java-11-openjdk-$arch java-11-openjdk \ + oracle-java11-jre-$arch oracle-java11-server-jre-$arch oracle-java11-jdk-$arch; do + if [ -x /usr/lib/jvm/$jvm/bin/java ]; then + export JAVA_HOME=/usr/lib/jvm/$jvm + PATH=$JAVA_HOME/bin:$PATH break -fi -done -export JAVA_HOME=/usr/lib/jvm/$jvm -PATH=$JAVA_HOME/bin:$PATH - -temp_jvm_cfg= -if [ ! -f /etc/${jvm%-$arch}/jvm-$arch.cfg ]; then - # the jre is not yet configured, but jvm.cfg is needed to run it - temp_jvm_cfg=/etc/${jvm%-$arch}/jvm-$arch.cfg - mkdir -p /etc/${jvm%-$arch} - if [ "$arch" = "armhf" ]; then - printf -- "-client KNOWN\n-server ALIASED_TO -client\n" > $temp_jvm_cfg - else - printf -- "-server KNOWN\n" > $temp_jvm_cfg fi -fi +done if dpkg-query --version >/dev/null; then nsspkg=$(dpkg-query -L "$(nsslib_name)" | sed -n 's,\(.*\)/libnss3\.so$,\1,p'|head -n 1) diff --git a/console-setup/cached_Lat15-Fixed16.psf.gz b/console-setup/cached_Lat15-Fixed16.psf.gz index 80565c5..8d002b7 100644 Binary files a/console-setup/cached_Lat15-Fixed16.psf.gz and b/console-setup/cached_Lat15-Fixed16.psf.gz differ diff --git a/console-setup/cached_UTF-8_del.kmap.gz b/console-setup/cached_UTF-8_del.kmap.gz index 477370a..2cee8e6 100644 Binary files a/console-setup/cached_UTF-8_del.kmap.gz and b/console-setup/cached_UTF-8_del.kmap.gz differ diff --git a/console-setup/cached_setup_font.sh b/console-setup/cached_setup_font.sh index 3939676..b767a0f 100755 --- a/console-setup/cached_setup_font.sh +++ b/console-setup/cached_setup_font.sh @@ -1,11 +1,11 @@ #!/bin/sh -setfont '/etc/console-setup/cached_Lat15-Fixed16.psf.gz' +setfont '/usr/share/consolefonts/Lat15-Fixed16.psf.gz' if ls /dev/fb* >/dev/null 2>/dev/null; then for i in /dev/vcs[0-9]*; do { : - setfont '/etc/console-setup/cached_Lat15-Fixed16.psf.gz' + setfont '/usr/share/consolefonts/Lat15-Fixed16.psf.gz' } < /dev/tty${i#/dev/vcs} > /dev/tty${i#/dev/vcs} done fi diff --git a/cron.daily/apt-compat b/cron.daily/apt-compat index 095a44c..b0b5537 100755 --- a/cron.daily/apt-compat +++ b/cron.daily/apt-compat @@ -19,9 +19,9 @@ check_power() # 255 (false) Power status could not be determined # Desktop systems always return 255 it seems if which on_ac_power >/dev/null 2>&1; then - on_ac_power - POWER=$? - if [ $POWER -eq 1 ]; then + if on_ac_power; then + : + elif [ $? -eq 1 ]; then return 1 fi fi diff --git a/cron.daily/dpkg b/cron.daily/dpkg index c0aefb8..62da817 100755 --- a/cron.daily/dpkg +++ b/cron.daily/dpkg @@ -9,33 +9,22 @@ if cd /var/backups ; then dbchanged=no dbfiles="arch status diversions statoverride" for db in $dbfiles ; do - if ! cmp -s dpkg.${db}.0 $dbdir/$db ; then + if ! cmp -s "dpkg.${db}.0" "$dbdir/$db"; then dbchanged=yes break; fi done if [ "$dbchanged" = "yes" ] ; then for db in $dbfiles ; do - [ -e $dbdir/$db ] || continue - cp -p $dbdir/$db dpkg.$db - savelog -c 7 dpkg.$db >/dev/null + [ -e "$dbdir/$db" ] || continue + cp -p "$dbdir/$db" "dpkg.$db" + savelog -c 7 "dpkg.$db" >/dev/null done fi # The alternatives database is independent from the dpkg database. dbalt=alternatives - # Switch the alternatives database backups from xz to gzip, as the latter - # is Essential and we can rely on it being always present, using xz here - # is not worth the trouble, disk space savings, or possible additional - # dependencies. - for dbseq in `seq 1 6` ; do - dbfile=${dbalt}.tar.${dbseq} - [ -e "${dbfile}.xz" ] || continue - unxz ${dbfile}.xz - gzip -9 $dbfile - done - # XXX: Ideally we'd use --warning=none instead of discarding stderr, but # as of GNU tar 1.27.1, it does not seem to work reliably (see #749307). if ! test -e ${dbalt}.tar.0 || diff --git a/cron.daily/man-db b/cron.daily/man-db index 0aeb8a5..1342bc6 100755 --- a/cron.daily/man-db +++ b/cron.daily/man-db @@ -4,6 +4,11 @@ set -e +if [ -d /run/systemd/system ]; then + # Skip in favour of systemd timer. + exit 0 +fi + iosched_idle= # Don't try to change I/O priority in a vserver or OpenVZ. if ! egrep -q '(envID|VxID):.*[1-9]' /proc/self/status && \ @@ -17,7 +22,7 @@ if ! [ -d /var/cache/man ]; then fi # expunge old catman pages which have not been read in a week -if [ ! -d /run/systemd/system ] && [ -d /var/cache/man ]; then +if [ -d /var/cache/man ]; then cd / start-stop-daemon --start --pidfile /dev/null --startas /bin/sh \ --oknodo --chuid man $iosched_idle -- -c \ diff --git a/cron.daily/mlocate b/cron.daily/mlocate index 331d063..bc69541 100755 --- a/cron.daily/mlocate +++ b/cron.daily/mlocate @@ -24,4 +24,4 @@ if [ -x /usr/bin/nocache ]; then NOCACHE="/usr/bin/nocache" fi -flock --nonblock /run/mlocate.daily.lock $NOCACHE $IONICE /usr/bin/updatedb.mlocate +flock --nonblock /run/mlocate.daily.lock $NOCACHE $IONICE nice /usr/bin/updatedb.mlocate diff --git a/cron.weekly/man-db b/cron.weekly/man-db index 87da3b8..6e3ad83 100755 --- a/cron.weekly/man-db +++ b/cron.weekly/man-db @@ -4,6 +4,11 @@ set -e +if [ -d /run/systemd/system ]; then + # Skip in favour of systemd timer. + exit 0 +fi + iosched_idle= # Don't try to change I/O priority in a vserver or OpenVZ. if ! egrep -q '(envID|VxID):.*[1-9]' /proc/self/status && \ diff --git a/crontab b/crontab index 95edd9b..c89cc0b 100644 --- a/crontab +++ b/crontab @@ -7,7 +7,14 @@ SHELL=/bin/sh PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin -# m h dom mon dow user command +# Example of job definition: +# .---------------- minute (0 - 59) +# | .------------- hour (0 - 23) +# | | .---------- day of month (1 - 31) +# | | | .------- month (1 - 12) OR jan,feb,mar,apr ... +# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat +# | | | | | +# * * * * * user-name command to be executed 17 * * * * root cd / && run-parts --report /etc/cron.hourly 25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily ) 47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly ) diff --git a/dbus-1/session.conf b/dbus-1/session.conf deleted file mode 120000 index b4a3252..0000000 --- a/dbus-1/session.conf +++ /dev/null @@ -1 +0,0 @@ -/usr/share/dbus-1/session.conf \ No newline at end of file diff --git a/dbus-1/system.conf b/dbus-1/system.conf deleted file mode 120000 index f22bf8f..0000000 --- a/dbus-1/system.conf +++ /dev/null @@ -1 +0,0 @@ -/usr/share/dbus-1/system.conf \ No newline at end of file diff --git a/dbus-1/system.d/org.freedesktop.hostname1.conf b/dbus-1/system.d/org.freedesktop.hostname1.conf deleted file mode 100644 index 46b4aad..0000000 --- a/dbus-1/system.d/org.freedesktop.hostname1.conf +++ /dev/null @@ -1,27 +0,0 @@ - - - - - - - - - - - - - - - - - - - diff --git a/dbus-1/system.d/org.freedesktop.locale1.conf b/dbus-1/system.d/org.freedesktop.locale1.conf deleted file mode 100644 index 79d0ecd..0000000 --- a/dbus-1/system.d/org.freedesktop.locale1.conf +++ /dev/null @@ -1,27 +0,0 @@ - - - - - - - - - - - - - - - - - - - diff --git a/dbus-1/system.d/org.freedesktop.login1.conf b/dbus-1/system.d/org.freedesktop.login1.conf deleted file mode 100644 index c89e404..0000000 --- a/dbus-1/system.d/org.freedesktop.login1.conf +++ /dev/null @@ -1,274 +0,0 @@ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - diff --git a/dbus-1/system.d/org.freedesktop.network1.conf b/dbus-1/system.d/org.freedesktop.network1.conf deleted file mode 100644 index 52dad33..0000000 --- a/dbus-1/system.d/org.freedesktop.network1.conf +++ /dev/null @@ -1,42 +0,0 @@ - - - - - - - - - - - - - - - - - - - - - - - - - - - - diff --git a/dbus-1/system.d/org.freedesktop.resolve1.conf b/dbus-1/system.d/org.freedesktop.resolve1.conf deleted file mode 100644 index 25b0977..0000000 --- a/dbus-1/system.d/org.freedesktop.resolve1.conf +++ /dev/null @@ -1,27 +0,0 @@ - - - - - - - - - - - - - - - - - - - diff --git a/dbus-1/system.d/org.freedesktop.systemd1.conf b/dbus-1/system.d/org.freedesktop.systemd1.conf deleted file mode 100644 index a61677e..0000000 --- a/dbus-1/system.d/org.freedesktop.systemd1.conf +++ /dev/null @@ -1,256 +0,0 @@ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - diff --git a/dbus-1/system.d/org.freedesktop.timedate1.conf b/dbus-1/system.d/org.freedesktop.timedate1.conf deleted file mode 100644 index 36557d5..0000000 --- a/dbus-1/system.d/org.freedesktop.timedate1.conf +++ /dev/null @@ -1,27 +0,0 @@ - - - - - - - - - - - - - - - - - - - diff --git a/debian_version b/debian_version index d4ce17d..ae425d6 100644 --- a/debian_version +++ b/debian_version @@ -1 +1 @@ -9.11 +10.1 diff --git a/default/amavisd-snmp-subagent b/default/amavisd-snmp-subagent index d94868b..beee367 100644 --- a/default/amavisd-snmp-subagent +++ b/default/amavisd-snmp-subagent @@ -1,7 +1,3 @@ -# To enable the amavis-snmp-subagent set ENABLED to yes - -ENABLED="no" - # there are two implementations of the subagent daemon: # 1) the default bdb version # 2) a zero mq based version diff --git a/default/chrony b/default/chrony index 929dea0..eead3e6 100644 --- a/default/chrony +++ b/default/chrony @@ -1,5 +1,6 @@ -# This is a configuration file for /etc/init.d/chrony; it allows you to -# pass various options to the chrony daemon without editing the init script. +# This is a configuration file for /etc/init.d/chrony and +# /lib/systemd/system/chrony.service; it allows you to pass various options to +# the chrony daemon without editing the init script or service file. # Options to pass to chrony. -DAEMON_OPTS="" +DAEMON_OPTS="-F -1" diff --git a/default/dovecot b/default/dovecot index 84aacee..dee9239 100644 --- a/default/dovecot +++ b/default/dovecot @@ -1,7 +1,4 @@ # /etc/default/dovecot -# Set to '0' to explicitly disable starting Dovecot -#ENABLED=0 - # Set to '1' to allow Dovecot daemons to produce core dumps #ALLOW_COREDUMPS=1 diff --git a/default/grub.d/init-select.cfg b/default/grub.d/init-select.cfg new file mode 100644 index 0000000..7fbfff8 --- /dev/null +++ b/default/grub.d/init-select.cfg @@ -0,0 +1,7 @@ +# Work around a bug in the obsolete init-select package which broke +# grub-mkconfig when init-select was removed but not purged. This file does +# nothing and will be removed in a later release. +# +# See: +# https://bugs.debian.org/858528 +# https://bugs.debian.org/863801 diff --git a/default/networking b/default/networking index 469f4ca..9655359 100644 --- a/default/networking +++ b/default/networking @@ -9,3 +9,23 @@ # Set to 'yes' to enable additional verbosity #VERBOSE=no + +# Method to wait for the network to become online, +# for services that depend on a working network: +# - ifup: wait for ifup to have configured an interface. +# - route: wait for a route to a given address to appear. +# - ping/ping6: wait for a host to respond to ping packets. +# - none: don't wait. +#WAIT_ONLINE_METHOD=ifup + +# Which interface to wait for. +# If none given, wait for all auto interfaces, or if there are none, +# wait for at least one hotplug interface. +#WAIT_ONLINE_IFACE= + +# Which address to wait for for route, ping and ping6 methods. +# If none is given for route, it waits for a default gateway. +#WAIT_ONLINE_ADDRESS= + +# Timeout in seconds for waiting for the network to come online. +#WAIT_ONLINE_TIMEOUT=300 diff --git a/default/uwsgi b/default/uwsgi index 48cffff..a640ab1 100644 --- a/default/uwsgi +++ b/default/uwsgi @@ -1,8 +1,8 @@ # Defaults for uWSGI initscript # sourced by /etc/init.d/uwsgi -# Run automatically at system startup? -RUN_AT_STARTUP=yes +# If you don't want uWSGI to be started as a system service, +# disable it using the command 'update-rc.d uwsgi disable' # At startup VERBOSE value is setted in 'no'. So when user invokes # uWSGI init.d script, no output is showed. diff --git a/dhcp/dhclient-exit-hooks.d/chrony b/dhcp/dhclient-exit-hooks.d/chrony new file mode 100644 index 0000000..690f3ab --- /dev/null +++ b/dhcp/dhclient-exit-hooks.d/chrony @@ -0,0 +1,25 @@ +SERVERFILE=/var/lib/dhcp/chrony.servers.$interface + +chrony_config() { + rm -f $SERVERFILE + for server in $new_ntp_servers; do + echo "$server iburst" >> $SERVERFILE + done + /usr/lib/chrony/chrony-helper update-daemon || : +} + +chrony_restore() { + if [ -f $SERVERFILE ]; then + rm -f $SERVERFILE + /usr/lib/chrony/chrony-helper update-daemon || : + fi +} + +case $reason in + BOUND|RENEW|REBIND|REBOOT) + chrony_config + ;; + EXPIRE|FAIL|RELEASE|STOP) + chrony_restore + ;; +esac diff --git a/dovecot/conf.d/10-director.conf b/dovecot/conf.d/10-director.conf index 31e97e9..073d8a8 100644 --- a/dovecot/conf.d/10-director.conf +++ b/dovecot/conf.d/10-director.conf @@ -21,10 +21,6 @@ # any connections. #director_user_expire = 15 min -# TCP/IP port that accepts doveadm connections (instead of director connections) -# If you enable this, you'll also need to add inet_listener for the port. -#director_doveadm_port = 0 - # How the username is translated before being hashed. Useful values include # %Ln if user can log in with or without @domain, %Ld if mailboxes are shared # within domain. @@ -54,6 +50,9 @@ service imap-login { service pop3-login { #executable = pop3-login director } +service submission-login { + #executable = submission-login director +} # Enable director for LMTP proxying: protocol lmtp { diff --git a/dovecot/conf.d/10-logging.conf b/dovecot/conf.d/10-logging.conf index 14798f1..bcd6dea 100644 --- a/dovecot/conf.d/10-logging.conf +++ b/dovecot/conf.d/10-logging.conf @@ -20,6 +20,26 @@ ## Logging verbosity and debugging. ## +# Log filter is a space-separated list conditions. If any of the conditions +# match, the log filter matches (i.e. they're ORed together). Parenthesis +# are supported if multiple conditions need to be matched together. +# Supported conditions are: +# event: - Match event name. '*' and '?' wildcards supported. +# source:[:] - Match source code filename [and line] +# field:= - Match field key to a value. Can be specified +# multiple times to match multiple keys. +# cat[egory]: - Match a category. Can be specified multiple times to +# match multiple categories. +# For example: event:http_request_* (cat:error cat:storage) + +# Filter to specify what debug logging to enable. This will eventually replace +# mail_debug and auth_debug settings. +#log_debug = + +# Crash after logging a matching event. For example category:error will crash +# any time an error is logged, which can be useful for debugging. +#log_core_filter = + # Log unsuccessful authentication attempts and the reasons why they failed. #auth_verbose = no @@ -72,14 +92,18 @@ plugin { # Log prefix for mail processes. See doc/wiki/Variables.txt for list of # possible variables you can use. -#mail_log_prefix = "%s(%u): " +#mail_log_prefix = "%s(%u)<%{pid}><%{session}>: " -# Format to use for logging mail deliveries. See doc/wiki/Variables.txt for -# list of all variables you can use. Some of the common ones include: +# Format to use for logging mail deliveries: # %$ - Delivery status message (e.g. "saved to INBOX") -# %m - Message-ID -# %s - Subject -# %f - From address -# %p - Physical size -# %w - Virtual size +# %m / %{msgid} - Message-ID +# %s / %{subject} - Subject +# %f / %{from} - From address +# %p / %{size} - Physical size +# %w / %{vsize} - Virtual size +# %e / %{from_envelope} - MAIL FROM envelope +# %{to_envelope} - RCPT TO envelope +# %{delivery_time} - How many milliseconds it took to deliver the mail +# %{session_time} - How long LMTP session took, not including delivery_time +# %{storage_id} - Backend-specific ID for mail, e.g. Maildir filename #deliver_log_format = msgid=%m: %$ diff --git a/dovecot/conf.d/10-mail.conf b/dovecot/conf.d/10-mail.conf index cc0d35e..d95112a 100644 --- a/dovecot/conf.d/10-mail.conf +++ b/dovecot/conf.d/10-mail.conf @@ -111,7 +111,7 @@ namespace inbox { # Group to enable temporarily for privileged operations. Currently this is # used only with INBOX when either its initial creation or dotlocking fails. # Typically this is set to "mail" to give access to /var/mail. -#mail_privileged_group = +mail_privileged_group = mail # Grant access to these supplementary groups for mail processes. Typically # these are used to set up access to shared mailboxes. Note that it may be @@ -165,7 +165,10 @@ namespace inbox { # methods. NFS users: flock doesn't work, remember to change mmap_disable. #lock_method = fcntl -# Directory in which LDA/LMTP temporarily stores incoming mails >128 kB. +# Directory where mails can be temporarily stored. Usually it's used only for +# mails larger than >= 128 kB. It's used by various parts of Dovecot, for +# example LDA/LMTP while delivering large mails or zlib plugin for keeping +# uncompressed mails. #mail_temp_dir = /tmp # Valid UID range for users, defaults to 500 and above. This is mostly @@ -220,7 +223,16 @@ namespace inbox { # Mailbox list indexes can be used to optimize IMAP STATUS commands. They are # also required for IMAP NOTIFY extension to be enabled. -#mailbox_list_index = no +#mailbox_list_index = yes + +# Trust mailbox list index to be up-to-date. This reduces disk I/O at the cost +# of potentially returning out-of-date results after e.g. server crashes. +# The results will be automatically fixed once the folders are opened. +#mailbox_list_index_very_dirty_syncs = yes + +# Should INBOX be kept up-to-date in the mailbox list index? By default it's +# not, because most of the mailbox accesses will open INBOX anyway. +#mailbox_list_index_include_inbox = no # The minimum number of mails in a mailbox before updates are done to cache # file. This allows optimizing Dovecot's behavior to do less disk writes at @@ -248,6 +260,19 @@ namespace inbox { # These should exist only after Dovecot dies in the middle of saving mails. #mail_temp_scan_interval = 1w +# How many slow mail accesses sorting can perform before it returns failure. +# With IMAP the reply is: NO [LIMIT] Requested sort would have taken too long. +# The untagged SORT reply is still returned, but it's likely not correct. +#mail_sort_max_read_count = 0 + +protocol !indexer-worker { + # If folder vsize calculation requires opening more than this many mails from + # disk (i.e. mail sizes aren't in cache already), return failure and finish + # the calculation via indexer process. Disabled by default. This setting must + # be 0 for indexer-worker processes. + #mail_vsize_bg_after_count = 0 +} + ## ## Maildir-specific settings ## @@ -347,7 +372,7 @@ namespace inbox { ## # Maximum dbox file size until it's rotated. -#mdbox_rotate_size = 2M +#mdbox_rotate_size = 10M # Maximum dbox file age until it's rotated. Typically in days. Day begins # from midnight, so 1d = today, 2d = yesterday, etc. 0 = check disabled. @@ -383,3 +408,13 @@ namespace inbox { # variables: %{md4}, %{md5}, %{sha1}, %{sha256}, %{sha512}, %{size}. # Variables can be truncated, e.g. %{sha256:80} returns only first 80 bits #mail_attachment_hash = %{sha1} + +# Settings to control adding $HasAttachment or $HasNoAttachment keywords. +# By default, all MIME parts with Content-Disposition=attachment, or inlines +# with filename parameter are consired attachments. +# add-flags-on-save - Add the keywords when saving new mails. +# content-type=type or !type - Include/exclude content type. Excluding will +# never consider the matched MIME part as attachment. Including will only +# negate an exclusion (e.g. content-type=!foo/* content-type=foo/bar). +# exclude-inlined - Exclude any Content-Disposition=inline MIME part. +#mail_attachment_detection_options = diff --git a/dovecot/conf.d/10-master.conf b/dovecot/conf.d/10-master.conf index e3d6260..d52ce80 100644 --- a/dovecot/conf.d/10-master.conf +++ b/dovecot/conf.d/10-master.conf @@ -45,6 +45,12 @@ service pop3-login { } } +service submission-login { + inet_listener submission { + #port = 587 + } +} + service lmtp { unix_listener lmtp { #mode = 0666 @@ -72,6 +78,11 @@ service pop3 { #process_limit = 1024 } +service submission { + # Max. number of SMTP Submission processes (connections) + #process_limit = 1024 +} + service auth { # auth_socket_path points to this userdb socket by default. It's typically # used by dovecot-lda, doveadm, possibly imap process, etc. Users that have diff --git a/dovecot/conf.d/10-ssl.conf b/dovecot/conf.d/10-ssl.conf index 37732d4..1b82c29 100644 --- a/dovecot/conf.d/10-ssl.conf +++ b/dovecot/conf.d/10-ssl.conf @@ -3,14 +3,14 @@ ## # SSL/TLS support: yes, no, required. -ssl = no +ssl = yes # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. Included doc/mkcert.sh can be used to easily generate self-signed # certificate, just make sure to update the domains in dovecot-openssl.cnf -#ssl_cert = . %d expands to recipient domain. +# Default is postmaster@%d. %d expands to recipient domain. #postmaster_address = # Hostname to use in various parts of sent mails (e.g. in Message-Id) and diff --git a/dovecot/conf.d/20-imap.conf b/dovecot/conf.d/20-imap.conf index b7dd95d..f11552f 100644 --- a/dovecot/conf.d/20-imap.conf +++ b/dovecot/conf.d/20-imap.conf @@ -21,10 +21,17 @@ # %{fetch_body_count} - Number of mails with mail body data sent to client # %{fetch_body_bytes} - Number of bytes with mail body data sent to client # %{deleted} - Number of mails where client added \Deleted flag -# %{expunged} - Number of mails that client expunged +# %{expunged} - Number of mails that client expunged, which does not +# include automatically expunged mails +# %{autoexpunged} - Number of mails that were automatically expunged after +# client disconnected # %{trashed} - Number of mails that client copied/moved to the # special_use=\Trash mailbox. -#imap_logout_format = in=%i out=%o +# %{appended} - Number of mails saved during the session +#imap_logout_format = in=%i out=%o deleted=%{deleted} expunged=%{expunged} \ +# trashed=%{trashed} hdr_count=%{fetch_hdr_count} \ +# hdr_bytes=%{fetch_hdr_bytes} body_count=%{fetch_body_count} \ +# body_bytes=%{fetch_body_bytes} # Override the IMAP CAPABILITY response. If the value begins with '+', # add the given capabilities on top of the defaults (e.g. +XFOO XBAR). @@ -65,6 +72,22 @@ # Host allowed in URLAUTH URLs sent by client. "*" allows all. #imap_urlauth_host = +# Enable IMAP LITERAL- extension (replaces LITERAL+) +#imap_literal_minus = no + +# What happens when FETCH fails due to some internal error: +# disconnect-immediately: +# The FETCH is aborted immediately and the IMAP client is disconnected. +# disconnect-after: +# The FETCH runs for all the requested mails returning as much data as +# possible. The client is finally disconnected without a tagged reply. +# no-after: +# Same as disconnect-after, but tagged NO reply is sent instead of +# disconnecting the client. If the client attempts to FETCH the same failed +# mail more than once, the client is disconnected. This is to avoid clients +# from going into infinite loops trying to FETCH a broken mail. +#imap_fetch_failure = disconnect-immediately + protocol imap { # Space separated list of plugins to load (default is global mail_plugins). #mail_plugins = $mail_plugins diff --git a/dovecot/conf.d/20-pop3.conf b/dovecot/conf.d/20-pop3.conf index e0ba552..7b310ea 100644 --- a/dovecot/conf.d/20-pop3.conf +++ b/dovecot/conf.d/20-pop3.conf @@ -37,7 +37,7 @@ # # If you want UIDL compatibility with other POP3 servers, use: # UW's ipop3d : %08Xv%08Xu -# Courier : %f or %v-%u (both might be used simultaneosly) +# Courier : %f or %v-%u (both might be used simultaneously) # Cyrus (<= 2.1.3) : %u # Cyrus (>= 2.1.4) : %v.%u # Dovecot v0.99.x : %v.%u diff --git a/dovecot/conf.d/90-quota.conf b/dovecot/conf.d/90-quota.conf index db1f718..3308c05 100644 --- a/dovecot/conf.d/90-quota.conf +++ b/dovecot/conf.d/90-quota.conf @@ -22,6 +22,9 @@ plugin { # over quota, if the quota doesn't grow too high. Default is to allow as # long as quota will stay under 10% above the limit. Also allowed e.g. 10M. #quota_grace = 10%% + + # Quota plugin can also limit the maximum accepted mail size. + #quota_max_mail_size = 100M } ## @@ -30,7 +33,7 @@ plugin { # You can execute a given command when user exceeds a specified quota limit. # Each quota root has separate limits. Only the command for the first -# exceeded limit is excecuted, so put the highest limit first. +# exceeded limit is executed, so put the highest limit first. # The commands are executed via script service by connecting to the named # UNIX socket (quota-warning below). # Note that % needs to be escaped as %%, otherwise "% " expands to empty. diff --git a/dovecot/conf.d/auth-system.conf.ext b/dovecot/conf.d/auth-system.conf.ext index 23f943c..dadb9f7 100644 --- a/dovecot/conf.d/auth-system.conf.ext +++ b/dovecot/conf.d/auth-system.conf.ext @@ -14,7 +14,7 @@ passdb { #args = dovecot } -# System users (NSS, /etc/passwd, or similiar). +# System users (NSS, /etc/passwd, or similar). # In many systems nowadays this uses Name Service Switch, which is # configured in /etc/nsswitch.conf. #passdb { @@ -23,7 +23,7 @@ passdb { #args = #} -# Shadow passwords for system users (NSS, /etc/shadow or similiar). +# Shadow passwords for system users (NSS, /etc/shadow or similar). # Deprecated by PAM nowadays. # #passdb { @@ -44,7 +44,7 @@ passdb { ## User databases ## -# System users (NSS, /etc/passwd, or similiar). In many systems nowadays this +# System users (NSS, /etc/passwd, or similar). In many systems nowadays this # uses Name Service Switch, which is configured in /etc/nsswitch.conf. userdb { # diff --git a/dovecot/dovecot-sql.conf.ext b/dovecot/dovecot-sql.conf.ext index a434244..8bbcbae 100644 --- a/dovecot/dovecot-sql.conf.ext +++ b/dovecot/dovecot-sql.conf.ext @@ -37,7 +37,7 @@ # settings, like: host=sql1.host.org host=sql2.host.org # # pgsql: -# For available options, see the PostgreSQL documention for the +# For available options, see the PostgreSQL documentation for the # PQconnectdb function of libpq. # Use maxconns=n (default 5) to change how many connections Dovecot can # create to pgsql. @@ -48,6 +48,9 @@ # # But also adds some new settings: # client_flags - See MySQL manual +# connect_timeout - Connect timeout in seconds (default: 5) +# read_timeout - Read timeout in seconds (default: 30) +# write_timeout - Write timeout in seconds (default: 30) # ssl_ca, ssl_ca_path - Set either one or both to enable SSL # ssl_cert, ssl_key - For sending client-side certificates to server # ssl_cipher - Set minimum allowed cipher security (default: HIGH) diff --git a/dovecot/private/dovecot.key b/dovecot/private/dovecot.key new file mode 120000 index 0000000..8dd7db9 --- /dev/null +++ b/dovecot/private/dovecot.key @@ -0,0 +1 @@ +/etc/ssl/private/ssl-cert-snakeoil.key \ No newline at end of file diff --git a/dovecot/private/dovecot.pem b/dovecot/private/dovecot.pem new file mode 120000 index 0000000..2d292e2 --- /dev/null +++ b/dovecot/private/dovecot.pem @@ -0,0 +1 @@ +/etc/ssl/certs/ssl-cert-snakeoil.pem \ No newline at end of file diff --git a/emacs/site-start.d/00debian-vars.el b/emacs/site-start.d/00debian-vars.el deleted file mode 100644 index a9db99c..0000000 --- a/emacs/site-start.d/00debian-vars.el +++ /dev/null @@ -1,57 +0,0 @@ -;; 00debian-vars.el -;; -;; Initialize some emacs variables from debian policy files. -;; -;; Copyright (C) 1997, Frederic Lepied -;; -;; original Author: Frederic Lepied -;; enhanced and documented by: Mark Eichin - -;;============================================================================= -;; Autoloaded section. -;;============================================================================= - - -;;;### - -(eval-when-compile - ;; Quiet byte compiler - (defvar gnus-nntpserver-file)) - -;;;*** - - -;;============================================================================= -;; Configuration section. -;;============================================================================= -(defun debian-file->string (name &optional func) - "Convert a file into a string" - (interactive "fFile name : ") - (let ((filename (expand-file-name name))) - (if (not (file-readable-p filename)) - nil - (with-temp-buffer - ;; Do not run any user `find-file-hooks' - (insert-file-contents-literally filename) - (if func - (funcall func)) - (buffer-string))))) - -(defun debian-clean-mailname () - (while (search-forward "\n" nil t) - (replace-match "" nil t))) - -;; Particular variables, and their justification: -;; policy/ch4.html, 4.3 Mail processing on Debian systems, /etc/mailname -;; policy/ch-binarypkg.html, 3.5 Maintainer scripts, /etc/news/server - -(let ((mailname - (debian-file->string "/etc/mailname" (function debian-clean-mailname)))) - (if mailname - (setq mail-host-address mailname))) - -;; Don't need to check NNTPSERVER for override, gnus does that for us. -(if (file-readable-p "/etc/news/server") - (setq gnus-nntpserver-file "/etc/news/server")) - -;;; 00debian-vars.el ends here diff --git a/emacs/site-start.d/50dictionaries-common.el b/emacs/site-start.d/50dictionaries-common.el index 924f605..0719f65 100644 --- a/emacs/site-start.d/50dictionaries-common.el +++ b/emacs/site-start.d/50dictionaries-common.el @@ -27,7 +27,10 @@ ;; a) It exists, that is, package is not removed. ;; b) Not in installations under dpkg control, otherwise we might get some ;; bogus errors on installation because of #132355 and friends. - (if (file-exists-p "/usr/share/emacs/site-lisp/dictionaries-common/debian-ispell.el") + (if (file-exists-p + (concat "/usr/share/" + (symbol-name debian-emacs-flavor) + "/site-lisp/dictionaries-common/debian-ispell.el")) (if (getenv "DPKG_RUNNING_VERSION") (message "Info: Skip debian-el loading if run under dpkg control.") (let ((coding-system-for-read 'raw-text)) ;; Read these as data streams diff --git a/emacs/site-start.d/50figlet.el b/emacs/site-start.d/50figlet.el new file mode 100644 index 0000000..5e1da10 --- /dev/null +++ b/emacs/site-start.d/50figlet.el @@ -0,0 +1,7 @@ +;;; 50figlet.el -- debian emacs setups for figlet + +(if (not (file-exists-p "/usr/share/emacs/site-lisp/figlet.el")) + (message "figlet removed but not purged, skipping setup") + + (autoload 'figlet-message "figlet" + "Inserts large message of text in ASCII font into current buffer" t)) diff --git a/emacs/site-start.el b/emacs/site-start.el deleted file mode 100644 index 06a95b1..0000000 --- a/emacs/site-start.el +++ /dev/null @@ -1,8 +0,0 @@ -;; Emacsen independent startup file. All of the various installed -;; flavors of emacs (emacs22, emacs23, xemacs21) will load this file -;; at startup. Make sure any code you put here is emacs flavor -;; independent. - -;; Package maintainers: do not have Debian packages edit this file. -;; See /usr/share/doc/emacsen-common/debian-emacs-policy.gz for the -;; proper way to handle Emacs package initialization code. diff --git a/etckeeper/commit.d/50vcs-commit b/etckeeper/commit.d/50vcs-commit index 55f0db2..f970d3d 100755 --- a/etckeeper/commit.d/50vcs-commit +++ b/etckeeper/commit.d/50vcs-commit @@ -41,9 +41,16 @@ else fi if [ "$VCS" = git ] && [ -d .git ]; then + # When not su'd to root, still set environment variables, + # since git's own code to determine the author and committer + # has several edge cases where it fails and would prevent the + # commit. + if [ -z "$USER" ]; then + USER="$(whoami)" + fi if [ -n "$USER" ]; then # Use user.name and user.email from the gitconfig belonging - # to the user who became root. + # to USER. USER_HOME="$(getent passwd "$USER" | cut -d: -f6)" if [ -n "$USER_HOME" ] && [ -e "$USER_HOME/.gitconfig" ]; then if [ -z "$GIT_AUTHOR_NAME" ]; then diff --git a/etckeeper/commit.d/99push b/etckeeper/commit.d/99push index b5418f7..3df1350 100755 --- a/etckeeper/commit.d/99push +++ b/etckeeper/commit.d/99push @@ -2,7 +2,7 @@ if [ -n "$PUSH_REMOTE" ]; then if [ "$VCS" = git ] && [ -d .git ]; then for REMOTE in $PUSH_REMOTE; do - git push "$REMOTE" master || true + git push "$REMOTE" || true done elif [ "$VCS" = hg ] && [ -d .hg ]; then for REMOTE in $PUSH_REMOTE; do diff --git a/etckeeper/etckeeper.conf b/etckeeper/etckeeper.conf index 0fb660b..f13de1c 100644 --- a/etckeeper/etckeeper.conf +++ b/etckeeper/etckeeper.conf @@ -32,11 +32,11 @@ DARCS_COMMIT_OPTIONS="-a" #AVOID_COMMIT_BEFORE_INSTALL=1 # The high-level package manager that's being used. -# (apt, pacman, pacman-g2, yum, dnf, zypper etc) +# (apt, pacman, pacman-g2, yum, dnf, zypper, apk etc) HIGHLEVEL_PACKAGE_MANAGER=apt # The low-level package manager that's being used. -# (dpkg, rpm, pacman, pacmatic, pacman-g2, etc) +# (dpkg, rpm, pacman, pacmatic, pacman-g2, apk etc) LOWLEVEL_PACKAGE_MANAGER=dpkg # To push each commit to a remote, put the name of the remote here. diff --git a/etckeeper/list-installed.d/50list-installed b/etckeeper/list-installed.d/50list-installed index 129447f..d89b8ce 100755 --- a/etckeeper/list-installed.d/50list-installed +++ b/etckeeper/list-installed.d/50list-installed @@ -21,5 +21,7 @@ else pacmatic -Q elif [ "$LOWLEVEL_PACKAGE_MANAGER" = pkgng ]; then pkg info -E "*" + elif [ "$LOWLEVEL_PACKAGE_MANAGER" = apk ]; then + apk info -v | sort fi fi diff --git a/etckeeper/post-install.d/50vcs-commit b/etckeeper/post-install.d/50vcs-commit index 53138c8..bc9cdf0 100755 --- a/etckeeper/post-install.d/50vcs-commit +++ b/etckeeper/post-install.d/50vcs-commit @@ -3,8 +3,23 @@ set -e pl="/var/cache/etckeeper/packagelist" +# Parent process is etckeeper +# (Only procps ps is currently supported, others will fail, +# so this may end up empty.) +ETCKEEPER_PID=$( ps --no-headers -o ppid "${PPID}" 2>/dev/null | sed 's/^ *//' ) + +# Find the parent of etckeeper and get the command line of the process +if ! [ -z "${ETCKEEPER_PID}" ]; then + ETCKEEPER_PPID=$( ps --no-headers -o ppid "${ETCKEEPER_PID}" | sed 's/^ *//' ) + ETCKEEPER_PARENT_COMMAND_LINE=$( ps --no-headers -o args "${ETCKEEPER_PPID}" ) +fi + if etckeeper unclean; then - message="committing changes in /etc after $HIGHLEVEL_PACKAGE_MANAGER run" + if [ -z "${ETCKEEPER_PARENT_COMMAND_LINE}" ]; then + message="committing changes in /etc after $HIGHLEVEL_PACKAGE_MANAGER run" + else + message="committing changes in /etc made by \"$ETCKEEPER_PARENT_COMMAND_LINE\"" + fi set +e if [ -e $pl.pre-install ] && [ "$(cat $pl.fmt 2>/dev/null || true)" = "$(etckeeper list-installed fmt)" ]; then @@ -24,5 +39,5 @@ if etckeeper unclean; then echo "warning: etckeeper failed to commit changes in /etc using $VCS" >&2 fi fi - + rm -f $pl.pre-install $pl.fmt diff --git a/etckeeper/pre-commit.d/20warn-problem-files b/etckeeper/pre-commit.d/20warn-problem-files index 4ffbfd1..6bd5c2b 100755 --- a/etckeeper/pre-commit.d/20warn-problem-files +++ b/etckeeper/pre-commit.d/20warn-problem-files @@ -2,7 +2,7 @@ set -e exclude_internal () { - egrep -v '(^|/)(.git|.hg|.bzr|_darcs)/' + egrep -v '(^|/)(\.git|\.hg|\.bzr|_darcs)/' } if [ "$VCS" = bzr ] || [ "$VCS" = darcs ]; then diff --git a/etckeeper/pre-commit.d/30store-metadata b/etckeeper/pre-commit.d/30store-metadata index 2b77c8e..ce014d1 100755 --- a/etckeeper/pre-commit.d/30store-metadata +++ b/etckeeper/pre-commit.d/30store-metadata @@ -1,6 +1,10 @@ #!/bin/sh set -e +# Make sure sort always sorts in same order. +LANG=C +export LANG + filter_ignore() { case "$VCS" in darcs) ignorefile=.darcsignore ;; @@ -16,7 +20,11 @@ filter_ignore() { ;; git) (git ls-files -oi --exclude-standard; git ls-files -oi --exclude-standard --directory) | sort | uniq > "$listfile" || true - sed 's/^\.\///' | grep -xFvf "$listfile" + if [ -s "$listfile" ]; then + sed 's/^\.\///' | grep -xFvf "$listfile" + else + cat - + fi ;; esac rm -f "$listfile" @@ -51,6 +59,7 @@ generate_metadata() { # Keep the sort order the same at all times. LC_COLLATE=C export LC_COLLATE + unset LC_ALL if [ "$VCS" = git ] || [ "$VCS" = hg ]; then # These version control systems do not track directories, @@ -70,45 +79,71 @@ generate_metadata() { # Store things that don't have the default user or group. # Store all file modes, in case the user has an unusual umask. - find $NOVCS \( -type f -or -type d \) -print | filter_ignore | sort | perl -ne ' - BEGIN { $q=chr(39) } - sub uidname { - my $want=shift; - if (exists $uidcache{$want}) { - return $uidcache{$want}; - } - my $name=scalar getpwuid($want); - return $uidcache{$want}=defined $name ? $name : $want; - } - sub gidname { - my $want=shift; - if (exists $gidcache{$want}) { - return $gidcache{$want}; - } - my $name=scalar getgrgid($want); - return $gidcache{$want}=defined $name ? $name : $want; - } - chomp; - my @stat=stat($_); - my $mode = $stat[2]; - my $uid = $stat[4]; - my $gid = $stat[5]; - s/$q/$q"$q"$q/g; # escape single quotes - s/^/$q/; - s/$/$q/; - if ($uid != $>) { - printf "maybe chown $q%s$q %s\n", uidname($uid), $_; - } - if ($gid != $)) { - printf "maybe chgrp $q%s$q %s\n", gidname($gid), $_; - } - printf "maybe chmod %04o %s\n", $mode & 07777, $_; - ' + find $NOVCS \( -type f -or -type d \) -print | filter_ignore | sort | maybe_chmod_chown # We don't handle xattrs. # Maybe check for getfattr/setfattr and use them if they're available? } +maybe_chmod_chown() { + if [ "$(which perl 2>/dev/null)" != "" ]; then + perl -ne ' + BEGIN { $q=chr(39) } + sub uidname { + my $want=shift; + if (exists $uidcache{$want}) { + return $uidcache{$want}; + } + my $name=scalar getpwuid($want); + return $uidcache{$want}=defined $name ? $name : $want; + } + sub gidname { + my $want=shift; + if (exists $gidcache{$want}) { + return $gidcache{$want}; + } + my $name=scalar getgrgid($want); + return $gidcache{$want}=defined $name ? $name : $want; + } + chomp; + my @stat=stat($_); + my $mode = $stat[2]; + my $uid = $stat[4]; + my $gid = $stat[5]; + s/$q/$q"$q"$q/g; # escape single quotes + s/^/$q/; + s/$/$q/; + if ($uid != $>) { + printf "maybe chown $q%s$q %s\n", uidname($uid), $_; + } + if ($gid != $)) { + printf "maybe chgrp $q%s$q %s\n", gidname($gid), $_; + } + printf "maybe chmod %04o %s\n", $mode & 07777, $_; + ' + return $? + else + # fallback if perl isn't present + euid=$(id -u) + egid=$(id -g) + q="'" + while read x; do + stat=$(stat -c "%f:%u:%g:%a:%U:%G" $x) + IFS=":" read mode uid gid perm uname gname < +# +# --ciphers ecdhe_ecdsa_aes_256_sha is used to workaround a +# "NSS error -12286" from curl as it attempts to connect using +# SSLv3. See https://www.centos.org/forums/viewtopic.php?t=52732 +# Tags: See jail.conf(5) man page +# Values: CMD +# +actionban = curl --fail --ciphers ecdhe_ecdsa_aes_256_sha --data 'key=' --data-urlencode 'comment=' --data 'ip=' --data 'category=' "https://www.abuseipdb.com/report/json" + +# Option: actionunban +# Notes.: command executed when unbanning an IP. Take care that the +# command is executed with Fail2Ban user rights. +# Tags: See jail.conf(5) man page +# Values: CMD +# +actionunban = + +[Init] +# Option: abuseipdb_apikey +# Notes Your API key from abuseipdb.com +# Values: STRING Default: None +# Register for abuseipdb [https://www.abuseipdb.com], get api key and set below. +# You will need to set the catagory in the action call. +abuseipdb_apikey = diff --git a/fail2ban/action.d/badips.py b/fail2ban/action.d/badips.py index 4bc879a..473fbf3 100644 --- a/fail2ban/action.d/badips.py +++ b/fail2ban/action.d/badips.py @@ -34,7 +34,7 @@ else: from fail2ban.server.actions import ActionBase -class BadIPsAction(ActionBase): +class BadIPsAction(ActionBase): # pragma: no cover - may be unavailable """Fail2Ban action which reports bans to badips.com, and also blacklist bad IPs listed on badips.com by using another action's ban method. @@ -105,6 +105,16 @@ class BadIPsAction(ActionBase): # Used later for threading.Timer for updating badips self._timer = None + @staticmethod + def isAvailable(timeout=1): + try: + response = urlopen(Request("/".join([BadIPsAction._badips]), + headers={'User-Agent': "Fail2Ban"}), timeout=timeout) + return True, '' + except Exception as e: # pragma: no cover + return False, e + + def getCategories(self, incParents=False): """Get badips.com categories. diff --git a/fail2ban/action.d/bsd-ipfw.conf b/fail2ban/action.d/bsd-ipfw.conf index 8b0a51a..cbd6a15 100644 --- a/fail2ban/action.d/bsd-ipfw.conf +++ b/fail2ban/action.d/bsd-ipfw.conf @@ -14,7 +14,7 @@ # Notes.: command executed once at the start of Fail2Ban. # Values: CMD # -actionstart = ipfw show | fgrep -q 'table()' || ( ipfw show | awk 'BEGIN { b = 1 } { if ($1 <= b) { b = $1 + 1 } else { e = b } } END { if (e) exit e
else exit b }'; num=$?; ipfw -q add $num from table\(
\) to me ; echo $num > "" ) +actionstart = ipfw show | fgrep -c -m 1 -s 'table(
)' > /dev/null 2>&1 || ( ipfw show | awk 'BEGIN { b = } { if ($1 < b) {} else if ($1 == b) { b = $1 + 1 } else { e = b } } END { if (e) exit e
else exit b }'; num=$?; ipfw -q add $num from table\(
\) to me ; echo $num > "" ) # Option: actionstop @@ -81,3 +81,11 @@ block = ip # Values: STRING # blocktype = unreach port + +# Option: lowest_rule_num +# Notes: When fail2ban starts with action and there is no rule for the given table yet +# then fail2ban will start looking for an empty slot starting with this rule number. +# Values: NUM +lowest_rule_num = 111 + + diff --git a/fail2ban/action.d/cloudflare.conf b/fail2ban/action.d/cloudflare.conf index aa87163..89df5b9 100644 --- a/fail2ban/action.d/cloudflare.conf +++ b/fail2ban/action.d/cloudflare.conf @@ -40,7 +40,12 @@ actioncheck = #