committing changes in /etc after apt run

Package changes:
+debsums 2.2.2 all
+libfile-fnmatch-perl 0.02-2build4 amd64

diff --git a/.etckeeper b/.etckeeper
index b4db5b9981e5ba7106cbffe79fb6c268647da657..c19e8c8ec4b20729ac1fefcca1a7b16738e3754b 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -2055,6 +2055,7 @@ maybe chmod 0755 'cron.daily/aptitude'
 maybe chmod 0755 'cron.daily/automysqlbackup'
 maybe chmod 0755 'cron.daily/bsdmainutils'
 maybe chmod 0755 'cron.daily/cracklib-runtime'
+maybe chmod 0755 'cron.daily/debsums'
 maybe chmod 0755 'cron.daily/devolo-updates'
 maybe chmod 0755 'cron.daily/dpkg'
 maybe chmod 0755 'cron.daily/etckeeper'
@@ -2074,10 +2075,12 @@ maybe chmod 0644 'cron.hourly/.placeholder'
 maybe chmod 0755 'cron.monthly'
 maybe chmod 0644 'cron.monthly/.placeholder'
 maybe chmod 0755 'cron.monthly/0anacron'
+maybe chmod 0755 'cron.monthly/debsums'
 maybe chmod 0755 'cron.weekly'
 maybe chmod 0644 'cron.weekly/.placeholder'
 maybe chmod 0755 'cron.weekly/0anacron'
 maybe chmod 0755 'cron.weekly/apt-xapian-index'
+maybe chmod 0755 'cron.weekly/debsums'
 maybe chmod 0755 'cron.weekly/man-db'
 maybe chmod 0755 'cron.weekly/tor'
 maybe chmod 0755 'cron.weekly/update-notifier-common'
@@ -2177,6 +2180,7 @@ maybe chmod 0644 'dbus-1/system.d/pulseaudio-system.conf'
 maybe chmod 0644 'dbus-1/system.d/wpa_supplicant.conf'
 maybe chmod 0644 'debconf.conf'
 maybe chmod 0644 'debian_version'
+maybe chmod 0644 'debsums-ignore'
 maybe chmod 0755 'default'
 maybe chmod 0644 'default/acpi-support'
 maybe chmod 0644 'default/acpid'
@@ -2205,6 +2209,7 @@ maybe chmod 0644 'default/cron'
 maybe chmod 0644 'default/cryptdisks'
 maybe chmod 0644 'default/cups'
 maybe chmod 0644 'default/dbus'
+maybe chmod 0644 'default/debsums'
 maybe chmod 0644 'default/devolo-updates'
 maybe chmod 0644 'default/devpts'
 maybe chmod 0644 'default/docker'

diff --git a/cron.daily/debsums b/cron.daily/debsums
new file mode 100755 (executable)
index 0000000..c5e6187
--- /dev/null
+++ b/cron.daily/debsums
@@ -0,0 +1,23 @@
+#!/bin/sh
+
+debsums="/usr/bin/debsums"
+ignorefile="/etc/debsums-ignore"
+
+[ -x $debsums ] || exit 0
+
+# source our config
+. /etc/default/debsums
+[ "z$CRON_CHECK" = "zdaily" ] || exit 0
+
+# See ionice(1)
+if [ -x /usr/bin/ionice ] &&
+    /usr/bin/ionice -c3 true 2>/dev/null; then
+    IONICE="/usr/bin/ionice -c3"
+fi
+
+exec 3>&1
+
+$IONICE $debsums -cs 2>&1 | egrep -vf "$ignorefile" | tee /proc/self/fd/3 | sed 's/^debsums: //' | logger -t debsums
+
+# Exit with a normal status code even if errors (which could be ignored) were found
+exit 0

diff --git a/cron.monthly/debsums b/cron.monthly/debsums
new file mode 100755 (executable)
index 0000000..3c4dfff
--- /dev/null
+++ b/cron.monthly/debsums
@@ -0,0 +1,23 @@
+#!/bin/sh
+
+debsums="/usr/bin/debsums"
+ignorefile="/etc/debsums-ignore"
+
+[ -x $debsums ] || exit 0
+
+# source our config
+. /etc/default/debsums
+[ "z$CRON_CHECK" = "zmonthly" ] || exit 0
+
+# See ionice(1)
+if [ -x /usr/bin/ionice ] &&
+    /usr/bin/ionice -c3 true 2>/dev/null; then
+    IONICE="/usr/bin/ionice -c3"
+fi
+
+exec 3>&1
+
+$IONICE $debsums -cs 2>&1 | egrep -vf "$ignorefile" | tee /proc/self/fd/3 | sed 's/^debsums: //' | logger -t debsums
+
+# Exit with a normal status code even if errors (which could be ignored) were found
+exit 0

diff --git a/cron.weekly/debsums b/cron.weekly/debsums
new file mode 100755 (executable)
index 0000000..3a15650
--- /dev/null
+++ b/cron.weekly/debsums
@@ -0,0 +1,23 @@
+#!/bin/sh
+
+debsums="/usr/bin/debsums"
+ignorefile="/etc/debsums-ignore"
+
+[ -x $debsums ] || exit 0
+
+# source our config
+. /etc/default/debsums
+[ "z$CRON_CHECK" = "zweekly" ] || exit 0
+
+# See ionice(1)
+if [ -x /usr/bin/ionice ] &&
+    /usr/bin/ionice -c3 true 2>/dev/null; then
+    IONICE="/usr/bin/ionice -c3"
+fi
+
+exec 3>&1
+
+$IONICE $debsums -cs 2>&1 | egrep -vf "$ignorefile" | tee /proc/self/fd/3 | sed 's/^debsums: //' | logger -t debsums
+
+# Exit with a normal status code even if errors (which could be ignored) were found
+exit 0

diff --git a/debsums-ignore b/debsums-ignore
new file mode 100644 (file)
index 0000000..e69de29

diff --git a/default/debsums b/default/debsums
new file mode 100644 (file)
index 0000000..26c636a
--- /dev/null
+++ b/default/debsums
@@ -0,0 +1,10 @@
+# Defaults for debsums cron jobs
+# sourced by /etc/cron.d/debsums
+
+#
+# This is a POSIX shell fragment
+#
+
+# Set this to never to disable the checksum verification or
+# one of "daily", "weekly", "monthly" to enable it
+CRON_CHECK=never