From cb2d42644e04e0f525361f1650b9edbc2d503e0d Mon Sep 17 00:00:00 2001 From: root Date: Thu, 25 Apr 2019 08:21:03 +0200 Subject: [PATCH 1/1] Initial commit --- .etckeeper | 1615 ++++++++ .gitignore | 54 + X11/Xsession.d/90gpg-agent | 22 + adduser.conf | 88 + aliases | 2 + aliases.db | Bin 0 -> 12288 bytes alternatives/README | 2 + alternatives/awk | 1 + alternatives/awk.1.gz | 1 + alternatives/builtins.7.gz | 1 + alternatives/dotlock | 1 + alternatives/dotlock.1.gz | 1 + alternatives/editor | 1 + alternatives/editor.1.gz | 1 + alternatives/ex | 1 + alternatives/ex.1.gz | 1 + alternatives/ex.fr.1.gz | 1 + alternatives/ex.it.1.gz | 1 + alternatives/ex.ja.1.gz | 1 + alternatives/ex.pl.1.gz | 1 + alternatives/ex.ru.1.gz | 1 + alternatives/frm | 1 + alternatives/frm.1.gz | 1 + alternatives/from | 1 + alternatives/from.1.gz | 1 + alternatives/ftp | 1 + alternatives/ftp.1.gz | 1 + alternatives/infobrowser | 1 + alternatives/infobrowser.1.gz | 1 + alternatives/locate | 1 + alternatives/locate.1.gz | 1 + alternatives/lzcat | 1 + alternatives/lzcat.1.gz | 1 + alternatives/lzcmp | 1 + alternatives/lzcmp.1.gz | 1 + alternatives/lzdiff | 1 + alternatives/lzdiff.1.gz | 1 + alternatives/lzegrep | 1 + alternatives/lzegrep.1.gz | 1 + alternatives/lzfgrep | 1 + alternatives/lzfgrep.1.gz | 1 + alternatives/lzgrep | 1 + alternatives/lzgrep.1.gz | 1 + alternatives/lzless | 1 + alternatives/lzless.1.gz | 1 + alternatives/lzma | 1 + alternatives/lzma.1.gz | 1 + alternatives/lzmore | 1 + alternatives/lzmore.1.gz | 1 + alternatives/mail | 1 + alternatives/mail.1.gz | 1 + alternatives/mailx | 1 + alternatives/mailx.1.gz | 1 + alternatives/messages | 1 + alternatives/messages.1.gz | 1 + alternatives/movemail | 1 + alternatives/movemail.1.gz | 1 + alternatives/mt | 1 + alternatives/mt.1.gz | 1 + alternatives/my.cnf | 1 + alternatives/nawk | 1 + alternatives/nawk.1.gz | 1 + alternatives/nc | 1 + alternatives/nc.1.gz | 1 + alternatives/netcat | 1 + alternatives/netcat.1.gz | 1 + alternatives/netrc.5.gz | 1 + alternatives/newt-palette | 1 + alternatives/pager | 1 + alternatives/pager.1.gz | 1 + alternatives/pftp | 1 + alternatives/pftp.1.gz | 1 + alternatives/phar | 1 + alternatives/phar.1.gz | 1 + alternatives/phar.phar | 1 + alternatives/phar.phar.1.gz | 1 + alternatives/php | 1 + alternatives/php.1.gz | 1 + alternatives/pico | 1 + alternatives/pico.1.gz | 1 + alternatives/pinentry | 1 + alternatives/pinentry.1.gz | 1 + alternatives/rcp | 1 + alternatives/rcp.1.gz | 1 + alternatives/readmsg | 1 + alternatives/readmsg.1.gz | 1 + alternatives/rlogin | 1 + alternatives/rlogin.1.gz | 1 + alternatives/rmt | 1 + alternatives/rmt.8.gz | 1 + alternatives/rsh | 1 + alternatives/rsh.1.gz | 1 + alternatives/rview | 1 + alternatives/rvim | 1 + alternatives/telnet | 1 + alternatives/telnet.1.gz | 1 + alternatives/text.plymouth | 1 + alternatives/traceroute6 | 1 + alternatives/traceroute6.8.gz | 1 + alternatives/unlzma | 1 + alternatives/unlzma.1.gz | 1 + alternatives/updatedb | 1 + alternatives/updatedb.8.gz | 1 + alternatives/vi | 1 + alternatives/vi.1.gz | 1 + alternatives/vi.fr.1.gz | 1 + alternatives/vi.it.1.gz | 1 + alternatives/vi.ja.1.gz | 1 + alternatives/vi.pl.1.gz | 1 + alternatives/vi.ru.1.gz | 1 + alternatives/view | 1 + alternatives/view.1.gz | 1 + alternatives/view.fr.1.gz | 1 + alternatives/view.it.1.gz | 1 + alternatives/view.ja.1.gz | 1 + alternatives/view.pl.1.gz | 1 + alternatives/view.ru.1.gz | 1 + alternatives/vim | 1 + alternatives/vimdiff | 1 + alternatives/vtrgb | 1 + alternatives/w | 1 + alternatives/w.1.gz | 1 + alternatives/write | 1 + alternatives/write.1.gz | 1 + apache2/apache2.conf | 227 ++ apache2/conf-available/charset.conf | 8 + apache2/conf-available/javascript-common.conf | 5 + .../conf-available/localized-error-pages.conf | 81 + .../other-vhosts-access-log.conf | 4 + apache2/conf-available/phpmyadmin.conf | 1 + apache2/conf-available/security.conf | 73 + apache2/conf-available/serve-cgi-bin.conf | 20 + apache2/conf-enabled/charset.conf | 1 + apache2/conf-enabled/javascript-common.conf | 1 + .../conf-enabled/localized-error-pages.conf | 1 + .../conf-enabled/other-vhosts-access-log.conf | 1 + apache2/conf-enabled/phpmyadmin.conf | 1 + apache2/conf-enabled/security.conf | 1 + apache2/conf-enabled/serve-cgi-bin.conf | 1 + apache2/envvars | 47 + apache2/magic | 935 +++++ apache2/mods-available/access_compat.load | 2 + apache2/mods-available/actions.conf | 11 + apache2/mods-available/actions.load | 1 + apache2/mods-available/alias.conf | 24 + apache2/mods-available/alias.load | 1 + apache2/mods-available/allowmethods.load | 1 + apache2/mods-available/asis.load | 2 + apache2/mods-available/auth_basic.load | 2 + apache2/mods-available/auth_digest.load | 2 + apache2/mods-available/auth_form.load | 2 + apache2/mods-available/authn_anon.load | 1 + apache2/mods-available/authn_core.load | 1 + apache2/mods-available/authn_dbd.load | 2 + apache2/mods-available/authn_dbm.load | 1 + apache2/mods-available/authn_file.load | 1 + apache2/mods-available/authn_socache.load | 1 + apache2/mods-available/authnz_fcgi.load | 1 + apache2/mods-available/authnz_ldap.load | 2 + apache2/mods-available/authz_core.load | 1 + apache2/mods-available/authz_dbd.load | 2 + apache2/mods-available/authz_dbm.load | 2 + apache2/mods-available/authz_groupfile.load | 2 + apache2/mods-available/authz_host.load | 2 + apache2/mods-available/authz_owner.load | 1 + apache2/mods-available/authz_user.load | 2 + apache2/mods-available/autoindex.conf | 96 + apache2/mods-available/autoindex.load | 1 + apache2/mods-available/brotli.load | 1 + apache2/mods-available/buffer.load | 1 + apache2/mods-available/cache.load | 1 + apache2/mods-available/cache_disk.conf | 27 + apache2/mods-available/cache_disk.load | 2 + apache2/mods-available/cache_socache.load | 2 + apache2/mods-available/cern_meta.load | 1 + apache2/mods-available/cgi.load | 1 + apache2/mods-available/cgid.conf | 4 + apache2/mods-available/cgid.load | 1 + apache2/mods-available/charset_lite.load | 1 + apache2/mods-available/data.load | 1 + apache2/mods-available/dav.load | 1 + apache2/mods-available/dav_fs.conf | 3 + apache2/mods-available/dav_fs.load | 2 + apache2/mods-available/dav_lock.load | 1 + apache2/mods-available/dbd.load | 1 + apache2/mods-available/deflate.conf | 10 + apache2/mods-available/deflate.load | 2 + apache2/mods-available/dialup.load | 1 + apache2/mods-available/dir.conf | 5 + apache2/mods-available/dir.load | 1 + apache2/mods-available/dump_io.load | 1 + apache2/mods-available/echo.load | 1 + apache2/mods-available/env.load | 1 + apache2/mods-available/expires.load | 1 + apache2/mods-available/ext_filter.load | 1 + apache2/mods-available/file_cache.load | 2 + apache2/mods-available/filter.load | 1 + apache2/mods-available/headers.load | 1 + apache2/mods-available/heartbeat.load | 3 + apache2/mods-available/heartmonitor.load | 3 + apache2/mods-available/http2.load | 1 + apache2/mods-available/ident.load | 1 + apache2/mods-available/imagemap.load | 1 + apache2/mods-available/include.load | 2 + apache2/mods-available/info.conf | 15 + apache2/mods-available/info.load | 1 + .../mods-available/lbmethod_bybusyness.load | 2 + .../mods-available/lbmethod_byrequests.load | 2 + .../mods-available/lbmethod_bytraffic.load | 2 + .../mods-available/lbmethod_heartbeat.load | 2 + apache2/mods-available/ldap.conf | 6 + apache2/mods-available/ldap.load | 1 + apache2/mods-available/log_debug.load | 1 + apache2/mods-available/log_forensic.load | 1 + apache2/mods-available/lua.load | 1 + apache2/mods-available/macro.load | 1 + apache2/mods-available/mime.conf | 251 ++ apache2/mods-available/mime.load | 1 + apache2/mods-available/mime_magic.conf | 5 + apache2/mods-available/mime_magic.load | 1 + apache2/mods-available/mpm_event.conf | 18 + apache2/mods-available/mpm_event.load | 2 + apache2/mods-available/mpm_prefork.conf | 16 + apache2/mods-available/mpm_prefork.load | 2 + apache2/mods-available/mpm_worker.conf | 22 + apache2/mods-available/mpm_worker.load | 2 + apache2/mods-available/negotiation.conf | 20 + apache2/mods-available/negotiation.load | 1 + apache2/mods-available/php7.2.conf | 25 + apache2/mods-available/php7.2.load | 3 + apache2/mods-available/proxy.conf | 27 + apache2/mods-available/proxy.load | 1 + apache2/mods-available/proxy_ajp.load | 2 + apache2/mods-available/proxy_balancer.conf | 15 + apache2/mods-available/proxy_balancer.load | 2 + apache2/mods-available/proxy_connect.load | 2 + apache2/mods-available/proxy_express.load | 2 + apache2/mods-available/proxy_fcgi.load | 2 + apache2/mods-available/proxy_fdpass.load | 2 + apache2/mods-available/proxy_ftp.conf | 8 + apache2/mods-available/proxy_ftp.load | 2 + apache2/mods-available/proxy_hcheck.load | 2 + apache2/mods-available/proxy_html.conf | 75 + apache2/mods-available/proxy_html.load | 2 + apache2/mods-available/proxy_http.load | 2 + apache2/mods-available/proxy_http2.load | 2 + apache2/mods-available/proxy_scgi.load | 2 + apache2/mods-available/proxy_uwsgi.load | 2 + apache2/mods-available/proxy_wstunnel.load | 2 + apache2/mods-available/ratelimit.load | 2 + apache2/mods-available/reflector.load | 1 + apache2/mods-available/remoteip.load | 1 + apache2/mods-available/reqtimeout.conf | 27 + apache2/mods-available/reqtimeout.load | 1 + apache2/mods-available/request.load | 1 + apache2/mods-available/rewrite.load | 1 + apache2/mods-available/sed.load | 1 + apache2/mods-available/session.load | 1 + apache2/mods-available/session_cookie.load | 2 + apache2/mods-available/session_crypto.load | 2 + apache2/mods-available/session_dbd.load | 2 + apache2/mods-available/setenvif.conf | 32 + apache2/mods-available/setenvif.load | 1 + apache2/mods-available/slotmem_plain.load | 1 + apache2/mods-available/slotmem_shm.load | 1 + apache2/mods-available/socache_dbm.load | 1 + apache2/mods-available/socache_memcache.load | 1 + apache2/mods-available/socache_shmcb.load | 1 + apache2/mods-available/speling.load | 1 + apache2/mods-available/ssl.conf | 85 + apache2/mods-available/ssl.load | 2 + apache2/mods-available/status.conf | 29 + apache2/mods-available/status.load | 1 + apache2/mods-available/substitute.load | 1 + apache2/mods-available/suexec.load | 1 + apache2/mods-available/unique_id.load | 1 + apache2/mods-available/userdir.conf | 12 + apache2/mods-available/userdir.load | 1 + apache2/mods-available/usertrack.load | 1 + apache2/mods-available/vhost_alias.load | 1 + apache2/mods-available/xml2enc.load | 1 + apache2/mods-enabled/access_compat.load | 1 + apache2/mods-enabled/alias.conf | 1 + apache2/mods-enabled/alias.load | 1 + apache2/mods-enabled/auth_basic.load | 1 + apache2/mods-enabled/authn_core.load | 1 + apache2/mods-enabled/authn_file.load | 1 + apache2/mods-enabled/authz_core.load | 1 + apache2/mods-enabled/authz_host.load | 1 + apache2/mods-enabled/authz_user.load | 1 + apache2/mods-enabled/autoindex.conf | 1 + apache2/mods-enabled/autoindex.load | 1 + apache2/mods-enabled/deflate.conf | 1 + apache2/mods-enabled/deflate.load | 1 + apache2/mods-enabled/dir.conf | 1 + apache2/mods-enabled/dir.load | 1 + apache2/mods-enabled/env.load | 1 + apache2/mods-enabled/filter.load | 1 + apache2/mods-enabled/mime.conf | 1 + apache2/mods-enabled/mime.load | 1 + apache2/mods-enabled/mpm_prefork.conf | 1 + apache2/mods-enabled/mpm_prefork.load | 1 + apache2/mods-enabled/negotiation.conf | 1 + apache2/mods-enabled/negotiation.load | 1 + apache2/mods-enabled/php7.2.conf | 1 + apache2/mods-enabled/php7.2.load | 1 + apache2/mods-enabled/reqtimeout.conf | 1 + apache2/mods-enabled/reqtimeout.load | 1 + apache2/mods-enabled/setenvif.conf | 1 + apache2/mods-enabled/setenvif.load | 1 + apache2/mods-enabled/status.conf | 1 + apache2/mods-enabled/status.load | 1 + apache2/ports.conf | 15 + apache2/sites-available/000-default.conf | 31 + apache2/sites-available/default-ssl.conf | 134 + apache2/sites-enabled/000-default.conf | 1 + apm/event.d/20hdparm | 82 + apparmor.d/abstractions/X | 61 + apparmor.d/abstractions/apache2-common | 34 + .../abstractions/apparmor_api/change_profile | 11 + apparmor.d/abstractions/apparmor_api/examine | 12 + .../abstractions/apparmor_api/find_mountpoint | 14 + .../abstractions/apparmor_api/introspect | 12 + .../abstractions/apparmor_api/is_enabled | 17 + apparmor.d/abstractions/aspell | 13 + apparmor.d/abstractions/audio | 77 + apparmor.d/abstractions/authentication | 51 + apparmor.d/abstractions/base | 164 + apparmor.d/abstractions/bash | 44 + apparmor.d/abstractions/consoles | 23 + apparmor.d/abstractions/cups-client | 18 + apparmor.d/abstractions/dbus | 16 + apparmor.d/abstractions/dbus-accessibility | 16 + .../abstractions/dbus-accessibility-strict | 17 + apparmor.d/abstractions/dbus-session | 17 + apparmor.d/abstractions/dbus-session-strict | 29 + apparmor.d/abstractions/dbus-strict | 19 + apparmor.d/abstractions/dconf | 8 + apparmor.d/abstractions/dovecot-common | 19 + apparmor.d/abstractions/enchant | 56 + apparmor.d/abstractions/fcitx | 13 + apparmor.d/abstractions/fcitx-strict | 21 + apparmor.d/abstractions/fonts | 59 + apparmor.d/abstractions/freedesktop.org | 51 + apparmor.d/abstractions/gnome | 106 + apparmor.d/abstractions/gnupg | 11 + apparmor.d/abstractions/ibus | 19 + apparmor.d/abstractions/kde | 68 + apparmor.d/abstractions/kerberosclient | 32 + apparmor.d/abstractions/launchpad-integration | 28 + apparmor.d/abstractions/ldapclient | 21 + apparmor.d/abstractions/libpam-systemd | 19 + apparmor.d/abstractions/likewise | 13 + apparmor.d/abstractions/mdns | 13 + apparmor.d/abstractions/mir | 17 + apparmor.d/abstractions/mozc | 12 + apparmor.d/abstractions/mysql | 15 + apparmor.d/abstractions/nameservice | 120 + apparmor.d/abstractions/nis | 15 + apparmor.d/abstractions/nvidia | 23 + apparmor.d/abstractions/openssl | 14 + apparmor.d/abstractions/orbit2 | 5 + apparmor.d/abstractions/p11-kit | 27 + apparmor.d/abstractions/perl | 23 + apparmor.d/abstractions/php | 36 + apparmor.d/abstractions/php5 | 3 + apparmor.d/abstractions/postfix-common | 35 + apparmor.d/abstractions/private-files | 46 + apparmor.d/abstractions/private-files-strict | 24 + apparmor.d/abstractions/python | 37 + apparmor.d/abstractions/ruby | 21 + apparmor.d/abstractions/samba | 27 + apparmor.d/abstractions/smbpass | 13 + apparmor.d/abstractions/ssl_certs | 29 + apparmor.d/abstractions/ssl_keys | 22 + apparmor.d/abstractions/svn-repositories | 52 + .../abstractions/ubuntu-bittorrent-clients | 17 + apparmor.d/abstractions/ubuntu-browsers | 42 + .../abstractions/ubuntu-browsers.d/java | 118 + apparmor.d/abstractions/ubuntu-browsers.d/kde | 7 + .../abstractions/ubuntu-browsers.d/mailto | 9 + .../abstractions/ubuntu-browsers.d/multimedia | 63 + .../ubuntu-browsers.d/plugins-common | 16 + .../ubuntu-browsers.d/productivity | 28 + .../ubuntu-browsers.d/text-editors | 14 + .../ubuntu-browsers.d/ubuntu-integration | 41 + .../ubuntu-browsers.d/ubuntu-integration-xul | 6 + .../abstractions/ubuntu-browsers.d/user-files | 28 + .../abstractions/ubuntu-console-browsers | 18 + apparmor.d/abstractions/ubuntu-console-email | 18 + apparmor.d/abstractions/ubuntu-email | 24 + apparmor.d/abstractions/ubuntu-feed-readers | 10 + apparmor.d/abstractions/ubuntu-gnome-terminal | 10 + apparmor.d/abstractions/ubuntu-helpers | 85 + apparmor.d/abstractions/ubuntu-konsole | 17 + apparmor.d/abstractions/ubuntu-media-players | 60 + apparmor.d/abstractions/ubuntu-unity7-base | 100 + .../abstractions/ubuntu-unity7-launcher | 7 + .../abstractions/ubuntu-unity7-messaging | 7 + apparmor.d/abstractions/ubuntu-xterm | 13 + apparmor.d/abstractions/user-download | 24 + apparmor.d/abstractions/user-mail | 23 + apparmor.d/abstractions/user-manpages | 24 + apparmor.d/abstractions/user-tmp | 20 + apparmor.d/abstractions/user-write | 21 + apparmor.d/abstractions/video | 6 + apparmor.d/abstractions/wayland | 14 + apparmor.d/abstractions/web-data | 25 + apparmor.d/abstractions/winbind | 21 + apparmor.d/abstractions/wutmp | 16 + apparmor.d/abstractions/xad | 25 + apparmor.d/abstractions/xdg-desktop | 24 + apparmor.d/disable/usr.sbin.rsyslogd | 1 + apparmor.d/local/README | 24 + apparmor.d/local/sbin.dhclient | 0 apparmor.d/local/usr.bin.man | 0 apparmor.d/local/usr.sbin.mysqld | 0 apparmor.d/local/usr.sbin.named | 0 apparmor.d/local/usr.sbin.rsyslogd | 0 apparmor.d/local/usr.sbin.tcpdump | 0 apparmor.d/sbin.dhclient | 105 + apparmor.d/tunables/alias | 16 + apparmor.d/tunables/apparmorfs | 11 + apparmor.d/tunables/dovecot | 20 + apparmor.d/tunables/global | 20 + apparmor.d/tunables/home | 25 + apparmor.d/tunables/home.d/site.local | 13 + apparmor.d/tunables/home.d/ubuntu | 7 + apparmor.d/tunables/kernelvars | 22 + apparmor.d/tunables/multiarch | 17 + apparmor.d/tunables/multiarch.d/site.local | 14 + apparmor.d/tunables/proc | 12 + apparmor.d/tunables/securityfs | 12 + apparmor.d/tunables/sys | 10 + apparmor.d/tunables/xdg-user-dirs | 24 + .../tunables/xdg-user-dirs.d/site.local | 21 + apparmor.d/usr.bin.man | 95 + apparmor.d/usr.sbin.mysqld | 68 + apparmor.d/usr.sbin.named | 73 + apparmor.d/usr.sbin.rsyslogd | 58 + apparmor.d/usr.sbin.tcpdump | 63 + .../network-interface-security/sbin.dhclient | 1 + apparmor/parser.conf | 62 + apparmor/subdomain.conf | 53 + apt/apt.conf.d/00trustcdrom | 1 + apt/apt.conf.d/01-vendor-ubuntu | 1 + apt/apt.conf.d/01autoremove | 54 + apt/apt.conf.d/01autoremove-kernels | 52 + apt/apt.conf.d/05etckeeper | 5 + apt/apt.conf.d/20apt-show-versions | 4 + apt/apt.conf.d/50command-not-found | 16 + apt/apt.conf.d/70debconf | 3 + apt/sources.list | 54 + apt/sources.list.d/webmin.list | 1 + apt/trusted.gpg | Bin 0 -> 891 bytes .../ubuntu-keyring-2012-archive.gpg | Bin 0 -> 2796 bytes .../ubuntu-keyring-2012-cdimage.gpg | Bin 0 -> 2794 bytes .../ubuntu-keyring-2018-archive.gpg | Bin 0 -> 1733 bytes bash.bashrc | 71 + bash_completion | 1 + bash_completion.d/git-prompt | 11 + bash_completion.d/grub | 495 +++ bind/bind.keys | 50 + bind/db.0 | 12 + bind/db.127 | 13 + bind/db.255 | 12 + bind/db.empty | 14 + bind/db.local | 14 + bind/named.conf | 11 + bind/named.conf.default-zones | 30 + bind/named.conf.local | 62 + bind/named.conf.options | 24 + bind/rndc.key | 4 + bind/zones.rfc1918 | 20 + bindresvport.blacklist | 15 + ca-certificates.conf | 144 + calendar/default | 15 + console-setup/ISO-8859-1.acm | 135 + console-setup/Uni2-Fixed16.psf.gz | Bin 0 -> 4147 bytes console-setup/cached_ISO-8859-1.acm.gz | Bin 0 -> 658 bytes console-setup/cached_ISO-8859-1_del.kmap.gz | Bin 0 -> 3402 bytes console-setup/cached_UTF-8_del.kmap.gz | Bin 0 -> 4024 bytes console-setup/cached_Uni2-Fixed16.psf.gz | Bin 0 -> 4147 bytes console-setup/cached_setup_font.sh | 19 + console-setup/cached_setup_keyboard.sh | 8 + console-setup/cached_setup_terminal.sh | 5 + console-setup/compose.ARMSCII-8.inc | 1 + console-setup/compose.CP1251.inc | 1 + console-setup/compose.CP1255.inc | 1 + console-setup/compose.CP1256.inc | 1 + console-setup/compose.GEORGIAN-ACADEMY.inc | 1 + console-setup/compose.GEORGIAN-PS.inc | 1 + console-setup/compose.IBM1133.inc | 1 + console-setup/compose.ISIRI-3342.inc | 1 + console-setup/compose.ISO-8859-1.inc | 155 + console-setup/compose.ISO-8859-10.inc | 1 + console-setup/compose.ISO-8859-11.inc | 1 + console-setup/compose.ISO-8859-13.inc | 161 + console-setup/compose.ISO-8859-14.inc | 130 + console-setup/compose.ISO-8859-15.inc | 153 + console-setup/compose.ISO-8859-16.inc | 1 + console-setup/compose.ISO-8859-2.inc | 124 + console-setup/compose.ISO-8859-3.inc | 146 + console-setup/compose.ISO-8859-4.inc | 121 + console-setup/compose.ISO-8859-5.inc | 1 + console-setup/compose.ISO-8859-6.inc | 1 + console-setup/compose.ISO-8859-7.inc | 52 + console-setup/compose.ISO-8859-8.inc | 1 + console-setup/compose.ISO-8859-9.inc | 156 + console-setup/compose.KOI8-R.inc | 1 + console-setup/compose.KOI8-U.inc | 1 + console-setup/compose.TIS-620.inc | 1 + console-setup/compose.VISCII.inc | 1 + console-setup/remap.inc | 32 + console-setup/vtrgb | 3 + console-setup/vtrgb.vga | 3 + cron.d/.placeholder | 2 + cron.d/php | 14 + cron.d/popularity-contest | 3 + cron.d/sync | 5 + cron.d/sysctl | 4 + cron.daily/.placeholder | 2 + cron.daily/apache2 | 25 + cron.daily/apt-compat | 55 + cron.daily/apt-show-versions | 5 + cron.daily/bsdmainutils | 16 + cron.daily/dpkg | 36 + cron.daily/etckeeper | 8 + cron.daily/logrotate | 18 + cron.daily/man-db | 38 + cron.daily/mlocate | 27 + cron.daily/passwd | 9 + cron.daily/popularity-contest | 185 + cron.daily/ubuntu-advantage-tools | 12 + cron.hourly/.placeholder | 2 + cron.monthly/.placeholder | 2 + cron.weekly/.placeholder | 2 + cron.weekly/man-db | 29 + crontab | 15 + cruft/filters-unex/etckeeper | 13 + dbconfig-common/config | 11 + dbconfig-common/phpmyadmin.conf | 87 + .../system.d/com.ubuntu.LanguageSelector.conf | 22 + dbus-1/system.d/org.freedesktop.Accounts.conf | 24 + debconf.conf | 83 + debian_version | 1 + default/acpid | 11 + default/amd64-microcode | 13 + default/apache-htcacheclean | 22 + default/bind9 | 6 + default/bsdmainutils | 4 + default/console-setup | 16 + default/crda | 11 + default/cron | 4 + default/dbus | 7 + default/grub | 33 + default/intel-microcode | 26 + default/irqbalance | 26 + default/keyboard | 10 + default/locale | 3 + default/motd-news | 19 + default/networkd-dispatcher | 3 + default/nss | 37 + default/rsync | 47 + default/rsyslog | 4 + default/ssh | 5 + default/ufw | 45 + default/useradd | 37 + deluser.conf | 20 + depmod.d/ubuntu.conf | 1 + dhcp/debug | 38 + dhcp/dhclient-enter-hooks.d/debug | 1 + dhcp/dhclient-enter-hooks.d/resolved | 72 + dhcp/dhclient-exit-hooks.d/debug | 1 + .../rfc3442-classless-routes | 78 + dhcp/dhclient-exit-hooks.d/timesyncd | 42 + dhcp/dhclient.conf | 54 + dictionaries-common/ispell-default | 0 dictionaries-common/words | 1 + dpkg/dpkg.cfg | 13 + dpkg/origins/debian | 3 + dpkg/origins/default | 1 + dpkg/origins/ubuntu | 4 + emacs/site-start.d/50dictionaries-common.el | 43 + environment | 1 + etckeeper/commit.d/10vcs-test | 17 + etckeeper/commit.d/20store-metadata | 1 + etckeeper/commit.d/30bzr-add | 8 + etckeeper/commit.d/30darcs-add | 14 + etckeeper/commit.d/30git-add | 8 + etckeeper/commit.d/30hg-addremove | 8 + etckeeper/commit.d/50vcs-commit | 128 + etckeeper/commit.d/99push | 14 + etckeeper/commit.d/README | 3 + etckeeper/daily | 17 + etckeeper/etckeeper.conf | 45 + etckeeper/init.d/10restore-metadata | 14 + etckeeper/init.d/20restore-etckeeper | 22 + etckeeper/init.d/40vcs-init | 17 + etckeeper/init.d/50vcs-ignore | 4 + etckeeper/init.d/50vcs-perm | 12 + etckeeper/init.d/50vcs-pre-commit-hook | 49 + etckeeper/init.d/60darcs-deleted-symlinks | 48 + etckeeper/init.d/70vcs-add | 27 + etckeeper/init.d/README | 13 + etckeeper/list-installed.d/50list-installed | 27 + etckeeper/post-install.d/50vcs-commit | 28 + etckeeper/post-install.d/README | 2 + etckeeper/pre-commit.d/20warn-problem-files | 30 + etckeeper/pre-commit.d/30store-metadata | 175 + etckeeper/pre-commit.d/README | 2 + etckeeper/pre-install.d/10packagelist | 5 + etckeeper/pre-install.d/50uncommitted-changes | 15 + etckeeper/pre-install.d/README | 3 + etckeeper/unclean.d/50test | 12 + etckeeper/unclean.d/README | 2 + etckeeper/uninit.d/01prompt | 20 + etckeeper/uninit.d/50remove-metadata | 6 + etckeeper/uninit.d/50vcs-uninit | 54 + etckeeper/uninit.d/README | 2 + etckeeper/update-ignore.d/01update-ignore | 209 + etckeeper/update-ignore.d/README | 2 + etckeeper/vcs.d/50vcs-cmd | 11 + fonts/conf.avail/10-antialias.conf | 8 + fonts/conf.avail/10-autohint.conf | 19 + fonts/conf.avail/10-hinting-full.conf | 19 + fonts/conf.avail/10-hinting-medium.conf | 19 + fonts/conf.avail/10-hinting-none.conf | 19 + fonts/conf.avail/10-hinting-slight.conf | 19 + fonts/conf.avail/10-no-sub-pixel.conf | 19 + fonts/conf.avail/10-scale-bitmap-fonts.conf | 87 + fonts/conf.avail/10-sub-pixel-bgr.conf | 19 + fonts/conf.avail/10-sub-pixel-rgb.conf | 19 + fonts/conf.avail/10-sub-pixel-vbgr.conf | 19 + fonts/conf.avail/10-sub-pixel-vrgb.conf | 19 + fonts/conf.avail/10-unhinted.conf | 19 + fonts/conf.avail/11-lcdfilter-default.conf | 21 + fonts/conf.avail/11-lcdfilter-legacy.conf | 21 + fonts/conf.avail/11-lcdfilter-light.conf | 21 + .../20-unhint-small-dejavu-lgc-sans-mono.conf | 26 + .../20-unhint-small-dejavu-lgc-sans.conf | 26 + .../20-unhint-small-dejavu-lgc-serif.conf | 26 + .../20-unhint-small-dejavu-sans-mono.conf | 26 + .../20-unhint-small-dejavu-sans.conf | 26 + .../20-unhint-small-dejavu-serif.conf | 26 + fonts/conf.avail/20-unhint-small-vera.conf | 53 + fonts/conf.avail/25-unhint-nonlatin.conf | 132 + fonts/conf.avail/30-cjk-aliases.conf | 569 +++ fonts/conf.avail/30-metric-aliases.conf | 634 +++ fonts/conf.avail/40-nonlatin.conf | 244 ++ fonts/conf.avail/45-generic.conf | 136 + fonts/conf.avail/45-latin.conf | 278 ++ fonts/conf.avail/49-sansserif.conf | 26 + fonts/conf.avail/50-user.conf | 20 + fonts/conf.avail/51-local.conf | 11 + fonts/conf.avail/53-monospace-lcd-filter.conf | 36 + fonts/conf.avail/57-dejavu-sans-mono.conf | 62 + fonts/conf.avail/57-dejavu-sans.conf | 87 + fonts/conf.avail/57-dejavu-serif.conf | 69 + fonts/conf.avail/58-dejavu-lgc-sans-mono.conf | 62 + fonts/conf.avail/58-dejavu-lgc-sans.conf | 87 + fonts/conf.avail/58-dejavu-lgc-serif.conf | 69 + fonts/conf.avail/60-generic.conf | 67 + fonts/conf.avail/60-latin.conf | 79 + .../64-language-selector-prefer.conf | 31 + fonts/conf.avail/65-fonts-persian.conf | 423 ++ fonts/conf.avail/65-khmer.conf | 20 + fonts/conf.avail/65-nonlatin.conf | 197 + fonts/conf.avail/69-language-selector-ja.conf | 21 + .../69-language-selector-zh-cn.conf | 61 + .../69-language-selector-zh-hk.conf | 56 + .../69-language-selector-zh-mo.conf | 58 + .../69-language-selector-zh-sg.conf | 61 + .../69-language-selector-zh-tw.conf | 71 + fonts/conf.avail/69-unifont.conf | 32 + fonts/conf.avail/70-force-bitmaps.conf | 17 + fonts/conf.avail/70-no-bitmaps.conf | 17 + fonts/conf.avail/70-yes-bitmaps.conf | 3 + fonts/conf.avail/80-delicious.conf | 23 + fonts/conf.avail/90-synthetic.conf | 68 + fonts/conf.avail/99-language-selector-zh.conf | 69 + fonts/conf.d/10-antialias.conf | 1 + fonts/conf.d/10-hinting-slight.conf | 1 + fonts/conf.d/10-scale-bitmap-fonts.conf | 1 + fonts/conf.d/11-lcdfilter-default.conf | 1 + .../20-unhint-small-dejavu-lgc-sans-mono.conf | 1 + .../20-unhint-small-dejavu-lgc-sans.conf | 1 + .../20-unhint-small-dejavu-lgc-serif.conf | 1 + .../20-unhint-small-dejavu-sans-mono.conf | 1 + fonts/conf.d/20-unhint-small-dejavu-sans.conf | 1 + .../conf.d/20-unhint-small-dejavu-serif.conf | 1 + fonts/conf.d/20-unhint-small-vera.conf | 1 + fonts/conf.d/30-cjk-aliases.conf | 1 + fonts/conf.d/30-metric-aliases.conf | 1 + fonts/conf.d/40-nonlatin.conf | 1 + fonts/conf.d/45-generic.conf | 1 + fonts/conf.d/45-latin.conf | 1 + fonts/conf.d/49-sansserif.conf | 1 + fonts/conf.d/50-user.conf | 1 + fonts/conf.d/51-local.conf | 1 + fonts/conf.d/57-dejavu-sans-mono.conf | 1 + fonts/conf.d/57-dejavu-sans.conf | 1 + fonts/conf.d/57-dejavu-serif.conf | 1 + fonts/conf.d/58-dejavu-lgc-sans-mono.conf | 1 + fonts/conf.d/58-dejavu-lgc-sans.conf | 1 + fonts/conf.d/58-dejavu-lgc-serif.conf | 1 + fonts/conf.d/60-generic.conf | 1 + fonts/conf.d/60-latin.conf | 1 + fonts/conf.d/64-language-selector-prefer.conf | 1 + fonts/conf.d/65-fonts-persian.conf | 1 + fonts/conf.d/65-nonlatin.conf | 1 + fonts/conf.d/69-language-selector-ja.conf | 1 + fonts/conf.d/69-language-selector-zh-cn.conf | 1 + fonts/conf.d/69-language-selector-zh-hk.conf | 1 + fonts/conf.d/69-language-selector-zh-mo.conf | 1 + fonts/conf.d/69-language-selector-zh-sg.conf | 1 + fonts/conf.d/69-language-selector-zh-tw.conf | 1 + fonts/conf.d/69-unifont.conf | 1 + fonts/conf.d/70-no-bitmaps.conf | 1 + fonts/conf.d/80-delicious.conf | 1 + fonts/conf.d/90-synthetic.conf | 1 + fonts/conf.d/99-language-selector-zh.conf | 1 + fonts/conf.d/README | 23 + fonts/fonts.conf | 108 + fstab | 12 + fuse.conf | 8 + gai.conf | 65 + groff/man.local | 33 + groff/mdoc.local | 33 + group | 59 + group- | 58 + grub.d/00_header | 448 +++ grub.d/05_debian_theme | 197 + grub.d/10_linux | 403 ++ grub.d/20_linux_xen | 299 ++ grub.d/30_os-prober | 376 ++ grub.d/30_uefi-firmware | 46 + grub.d/40_custom | 5 + grub.d/41_custom | 9 + grub.d/README | 11 + gshadow | 59 + gshadow- | 58 + hdparm.conf | 142 + host.conf | 3 + hostname | 1 + hosts | 8 + hosts.allow | 10 + hosts.deny | 17 + init.d/acpid | 83 + init.d/apache-htcacheclean | 71 + init.d/apache2 | 355 ++ init.d/apparmor | 161 + init.d/bind9 | 145 + init.d/console-setup.sh | 46 + init.d/cron | 92 + init.d/dbus | 122 + init.d/grub-common | 39 + init.d/hwclock.sh | 120 + init.d/irqbalance | 93 + init.d/keyboard-setup.sh | 50 + init.d/kmod | 92 + init.d/mysql | 191 + init.d/plymouth | 89 + init.d/plymouth-log | 47 + init.d/postfix | 141 + init.d/procps | 34 + init.d/rsync | 152 + init.d/rsyslog | 129 + init.d/ssh | 162 + init.d/udev | 244 ++ init.d/ufw | 86 + init.d/uuidd | 62 + init.d/webmin | 82 + init/mysql.conf | 63 + initramfs-tools/initramfs.conf | 81 + initramfs-tools/modules | 11 + initramfs-tools/update-initramfs.conf | 20 + inputrc | 67 + insserv.conf.d/bind9 | 1 + insserv.conf.d/postfix | 1 + iproute2/bpf_pinning | 6 + iproute2/ematch_map | 8 + iproute2/group | 2 + iproute2/nl_protos | 23 + iproute2/rt_dsfield | 26 + iproute2/rt_protos | 23 + iproute2/rt_protos.d/README | 2 + iproute2/rt_realms | 13 + iproute2/rt_scopes | 11 + iproute2/rt_tables | 11 + iproute2/rt_tables.d/README | 2 + issue | 2 + issue.net | 1 + kernel-img.conf | 6 + kernel/postinst.d/apt-auto-removal | 83 + kernel/postinst.d/initramfs-tools | 35 + kernel/postinst.d/zz-update-grub | 26 + kernel/postrm.d/initramfs-tools | 35 + kernel/postrm.d/zz-update-grub | 26 + kernel/preinst.d/intel-microcode | 17 + ld.so.conf | 2 + ld.so.conf.d/libc.conf | 2 + ld.so.conf.d/x86_64-linux-gnu.conf | 4 + ldap/ldap.conf | 17 + legal | 8 + libaudit.conf | 7 + libnl-3/classid | 45 + libnl-3/pktloc | 76 + .../conf-available/90-javascript-alias.conf | 1 + .../conf-enabled/90-javascript-alias.conf | 1 + locale.alias | 82 + locale.gen | 505 +++ localtime | 1 + logcheck/ignore.d.paranoid/mysql-server-5_7 | 9 + logcheck/ignore.d.server/gpg-agent | 11 + logcheck/ignore.d.server/libsasl2-modules | 1 + logcheck/ignore.d.server/mysql-server-5_7 | 32 + logcheck/ignore.d.server/rsyslog | 6 + .../ignore.d.workstation/mysql-server-5_7 | 32 + login.defs | 341 ++ logrotate.conf | 24 + logrotate.d/alternatives | 9 + logrotate.d/apache2 | 20 + logrotate.d/apt | 16 + logrotate.d/btmp | 7 + logrotate.d/dbconfig-common | 7 + logrotate.d/dpkg | 9 + logrotate.d/mysql-server | 27 + logrotate.d/rsyslog | 37 + logrotate.d/ufw | 13 + logrotate.d/wtmp | 8 + lsb-release | 4 + ltrace.conf | 543 +++ machine-id | 1 + magic | 3 + magic.mime | 3 + mailcap | 65 + mailcap.order | 10 + mailname | 1 + manpath.config | 131 + mime.types | 836 ++++ mke2fs.conf | 47 + modprobe.d/amd64-microcode-blacklist.conf | 3 + modprobe.d/blacklist-ath_pci.conf | 7 + modprobe.d/blacklist-firewire.conf | 10 + modprobe.d/blacklist-framebuffer.conf | 32 + modprobe.d/blacklist-rare-network.conf | 22 + modprobe.d/blacklist.conf | 56 + modprobe.d/intel-microcode-blacklist.conf | 3 + modprobe.d/iwlwifi.conf | 7 + modules | 5 + modules-load.d/modules.conf | 1 + mysql/conf.d/mysql.cnf | 1 + mysql/conf.d/mysqldump.cnf | 4 + mysql/debian-start | 5 + mysql/debian.cnf | 11 + mysql/my.cnf | 1 + mysql/my.cnf.fallback | 23 + mysql/mysql.cnf | 21 + mysql/mysql.conf.d/mysqld.cnf | 105 + mysql/mysql.conf.d/mysqld_safe_syslog.cnf | 2 + nanorc | 272 ++ netplan/01-netcfg.yaml | 19 + network/if-down.d/bind9 | 15 + network/if-down.d/postfix | 34 + network/if-up.d/bind9 | 15 + network/if-up.d/openssh-server | 42 + network/if-up.d/postfix | 43 + network/interfaces | 4 + networks | 4 + newt/palette | 1 + newt/palette.original | 0 newt/palette.ubuntu | 9 + nsswitch.conf | 20 + os-release | 1 + pam.conf | 15 + pam.d/chfn | 16 + pam.d/chpasswd | 5 + pam.d/chsh | 20 + pam.d/common-account | 25 + pam.d/common-auth | 26 + pam.d/common-password | 33 + pam.d/common-session | 31 + pam.d/common-session-noninteractive | 30 + pam.d/cron | 21 + pam.d/login | 116 + pam.d/newusers | 5 + pam.d/other | 16 + pam.d/passwd | 6 + pam.d/runuser | 5 + pam.d/runuser-l | 5 + pam.d/sshd | 55 + pam.d/su | 61 + pam.d/sudo | 7 + pam.d/systemd-user | 12 + pam.d/webmin | 5 + passwd | 31 + passwd- | 31 + perl/Net/libnet.cfg | 21 + php/7.2/apache2/conf.d/10-mysqlnd.ini | 1 + php/7.2/apache2/conf.d/10-opcache.ini | 1 + php/7.2/apache2/conf.d/10-pdo.ini | 1 + php/7.2/apache2/conf.d/15-xml.ini | 1 + php/7.2/apache2/conf.d/20-bz2.ini | 1 + php/7.2/apache2/conf.d/20-calendar.ini | 1 + php/7.2/apache2/conf.d/20-ctype.ini | 1 + php/7.2/apache2/conf.d/20-curl.ini | 1 + php/7.2/apache2/conf.d/20-dom.ini | 1 + php/7.2/apache2/conf.d/20-exif.ini | 1 + php/7.2/apache2/conf.d/20-fileinfo.ini | 1 + php/7.2/apache2/conf.d/20-ftp.ini | 1 + php/7.2/apache2/conf.d/20-gd.ini | 1 + php/7.2/apache2/conf.d/20-gettext.ini | 1 + php/7.2/apache2/conf.d/20-iconv.ini | 1 + php/7.2/apache2/conf.d/20-json.ini | 1 + php/7.2/apache2/conf.d/20-mbstring.ini | 1 + php/7.2/apache2/conf.d/20-mysqli.ini | 1 + php/7.2/apache2/conf.d/20-pdo_mysql.ini | 1 + php/7.2/apache2/conf.d/20-phar.ini | 1 + php/7.2/apache2/conf.d/20-posix.ini | 1 + php/7.2/apache2/conf.d/20-readline.ini | 1 + php/7.2/apache2/conf.d/20-shmop.ini | 1 + php/7.2/apache2/conf.d/20-simplexml.ini | 1 + php/7.2/apache2/conf.d/20-sockets.ini | 1 + php/7.2/apache2/conf.d/20-sysvmsg.ini | 1 + php/7.2/apache2/conf.d/20-sysvsem.ini | 1 + php/7.2/apache2/conf.d/20-sysvshm.ini | 1 + php/7.2/apache2/conf.d/20-tokenizer.ini | 1 + php/7.2/apache2/conf.d/20-wddx.ini | 1 + php/7.2/apache2/conf.d/20-xmlreader.ini | 1 + php/7.2/apache2/conf.d/20-xmlwriter.ini | 1 + php/7.2/apache2/conf.d/20-xsl.ini | 1 + php/7.2/apache2/conf.d/20-zip.ini | 1 + php/7.2/apache2/php.ini | 1927 ++++++++++ php/7.2/cli/conf.d/10-mysqlnd.ini | 1 + php/7.2/cli/conf.d/10-opcache.ini | 1 + php/7.2/cli/conf.d/10-pdo.ini | 1 + php/7.2/cli/conf.d/15-xml.ini | 1 + php/7.2/cli/conf.d/20-bz2.ini | 1 + php/7.2/cli/conf.d/20-calendar.ini | 1 + php/7.2/cli/conf.d/20-ctype.ini | 1 + php/7.2/cli/conf.d/20-curl.ini | 1 + php/7.2/cli/conf.d/20-dom.ini | 1 + php/7.2/cli/conf.d/20-exif.ini | 1 + php/7.2/cli/conf.d/20-fileinfo.ini | 1 + php/7.2/cli/conf.d/20-ftp.ini | 1 + php/7.2/cli/conf.d/20-gd.ini | 1 + php/7.2/cli/conf.d/20-gettext.ini | 1 + php/7.2/cli/conf.d/20-iconv.ini | 1 + php/7.2/cli/conf.d/20-json.ini | 1 + php/7.2/cli/conf.d/20-mbstring.ini | 1 + php/7.2/cli/conf.d/20-mysqli.ini | 1 + php/7.2/cli/conf.d/20-pdo_mysql.ini | 1 + php/7.2/cli/conf.d/20-phar.ini | 1 + php/7.2/cli/conf.d/20-posix.ini | 1 + php/7.2/cli/conf.d/20-readline.ini | 1 + php/7.2/cli/conf.d/20-shmop.ini | 1 + php/7.2/cli/conf.d/20-simplexml.ini | 1 + php/7.2/cli/conf.d/20-sockets.ini | 1 + php/7.2/cli/conf.d/20-sysvmsg.ini | 1 + php/7.2/cli/conf.d/20-sysvsem.ini | 1 + php/7.2/cli/conf.d/20-sysvshm.ini | 1 + php/7.2/cli/conf.d/20-tokenizer.ini | 1 + php/7.2/cli/conf.d/20-wddx.ini | 1 + php/7.2/cli/conf.d/20-xmlreader.ini | 1 + php/7.2/cli/conf.d/20-xmlwriter.ini | 1 + php/7.2/cli/conf.d/20-xsl.ini | 1 + php/7.2/cli/conf.d/20-zip.ini | 1 + php/7.2/cli/php.ini | 1927 ++++++++++ php/7.2/mods-available/bz2.ini | 3 + php/7.2/mods-available/calendar.ini | 3 + php/7.2/mods-available/ctype.ini | 3 + php/7.2/mods-available/curl.ini | 3 + php/7.2/mods-available/dom.ini | 3 + php/7.2/mods-available/exif.ini | 3 + php/7.2/mods-available/fileinfo.ini | 3 + php/7.2/mods-available/ftp.ini | 3 + php/7.2/mods-available/gd.ini | 3 + php/7.2/mods-available/gettext.ini | 3 + php/7.2/mods-available/iconv.ini | 3 + php/7.2/mods-available/json.ini | 3 + php/7.2/mods-available/mbstring.ini | 3 + php/7.2/mods-available/mysqli.ini | 3 + php/7.2/mods-available/mysqlnd.ini | 3 + php/7.2/mods-available/opcache.ini | 3 + php/7.2/mods-available/pdo.ini | 3 + php/7.2/mods-available/pdo_mysql.ini | 3 + php/7.2/mods-available/phar.ini | 3 + php/7.2/mods-available/posix.ini | 3 + php/7.2/mods-available/readline.ini | 3 + php/7.2/mods-available/shmop.ini | 3 + php/7.2/mods-available/simplexml.ini | 3 + php/7.2/mods-available/sockets.ini | 3 + php/7.2/mods-available/sysvmsg.ini | 3 + php/7.2/mods-available/sysvsem.ini | 3 + php/7.2/mods-available/sysvshm.ini | 3 + php/7.2/mods-available/tokenizer.ini | 3 + php/7.2/mods-available/wddx.ini | 3 + php/7.2/mods-available/xml.ini | 3 + php/7.2/mods-available/xmlreader.ini | 3 + php/7.2/mods-available/xmlwriter.ini | 3 + php/7.2/mods-available/xsl.ini | 3 + php/7.2/mods-available/zip.ini | 3 + phpmyadmin/apache.conf | 60 + phpmyadmin/config-db.php | 18 + phpmyadmin/config.footer.inc.php | 8 + phpmyadmin/config.header.inc.php | 8 + phpmyadmin/config.inc.php | 169 + phpmyadmin/htpasswd.setup | 1 + phpmyadmin/lighttpd.conf | 30 + phpmyadmin/phpmyadmin.desktop | 8 + phpmyadmin/phpmyadmin.service | 10 + pm/sleep.d/10_grub-common | 11 + popularity-contest.conf | 14 + postfix/dynamicmaps.cf | 1 + postfix/main.cf | 47 + postfix/main.cf.proto | 684 ++++ postfix/makedefs.out | 65 + postfix/master.cf | 126 + postfix/master.cf.proto | 126 + postfix/post-install | 915 +++++ postfix/postfix-files | 221 ++ postfix/postfix-script | 428 +++ ppp/ip-down.d/bind9 | 15 + ppp/ip-down.d/postfix | 34 + ppp/ip-up.d/bind9 | 15 + ppp/ip-up.d/postfix | 43 + profile | 27 + profile.d/01-locale-fix.sh | 2 + profile.d/bash_completion.sh | 15 + profile.d/cedilla-portuguese.sh | 24 + protocols | 64 + python/debian_config | 3 + python2.7/sitecustomize.py | 7 + python3.6/sitecustomize.py | 7 + python3/debian_config | 3 + rc0.d/K01apache-htcacheclean | 1 + rc0.d/K01apache2 | 1 + rc0.d/K01bind9 | 1 + rc0.d/K01irqbalance | 1 + rc0.d/K01mysql | 1 + rc0.d/K01plymouth | 1 + rc0.d/K01postfix | 1 + rc0.d/K01rsyslog | 1 + rc0.d/K01uuidd | 1 + rc0.d/K10webmin | 1 + rc1.d/K01apache-htcacheclean | 1 + rc1.d/K01apache2 | 1 + rc1.d/K01bind9 | 1 + rc1.d/K01irqbalance | 1 + rc1.d/K01mysql | 1 + rc1.d/K01postfix | 1 + rc1.d/K01rsyslog | 1 + rc1.d/K01ufw | 1 + rc1.d/K01uuidd | 1 + rc1.d/K10webmin | 1 + rc2.d/K01apache-htcacheclean | 1 + rc2.d/S01acpid | 1 + rc2.d/S01apache2 | 1 + rc2.d/S01bind9 | 1 + rc2.d/S01console-setup.sh | 1 + rc2.d/S01cron | 1 + rc2.d/S01dbus | 1 + rc2.d/S01grub-common | 1 + rc2.d/S01irqbalance | 1 + rc2.d/S01mysql | 1 + rc2.d/S01plymouth | 1 + rc2.d/S01postfix | 1 + rc2.d/S01rsync | 1 + rc2.d/S01rsyslog | 1 + rc2.d/S01ssh | 1 + rc2.d/S01uuidd | 1 + rc2.d/S99webmin | 1 + rc3.d/K01apache-htcacheclean | 1 + rc3.d/S01acpid | 1 + rc3.d/S01apache2 | 1 + rc3.d/S01bind9 | 1 + rc3.d/S01console-setup.sh | 1 + rc3.d/S01cron | 1 + rc3.d/S01dbus | 1 + rc3.d/S01grub-common | 1 + rc3.d/S01irqbalance | 1 + rc3.d/S01mysql | 1 + rc3.d/S01plymouth | 1 + rc3.d/S01postfix | 1 + rc3.d/S01rsync | 1 + rc3.d/S01rsyslog | 1 + rc3.d/S01ssh | 1 + rc3.d/S01uuidd | 1 + rc3.d/S99webmin | 1 + rc4.d/K01apache-htcacheclean | 1 + rc4.d/K10webmin | 1 + rc4.d/S01acpid | 1 + rc4.d/S01apache2 | 1 + rc4.d/S01bind9 | 1 + rc4.d/S01console-setup.sh | 1 + rc4.d/S01cron | 1 + rc4.d/S01dbus | 1 + rc4.d/S01grub-common | 1 + rc4.d/S01irqbalance | 1 + rc4.d/S01mysql | 1 + rc4.d/S01plymouth | 1 + rc4.d/S01postfix | 1 + rc4.d/S01rsync | 1 + rc4.d/S01rsyslog | 1 + rc4.d/S01ssh | 1 + rc4.d/S01uuidd | 1 + rc5.d/K01apache-htcacheclean | 1 + rc5.d/S01acpid | 1 + rc5.d/S01apache2 | 1 + rc5.d/S01bind9 | 1 + rc5.d/S01console-setup.sh | 1 + rc5.d/S01cron | 1 + rc5.d/S01dbus | 1 + rc5.d/S01grub-common | 1 + rc5.d/S01irqbalance | 1 + rc5.d/S01mysql | 1 + rc5.d/S01plymouth | 1 + rc5.d/S01postfix | 1 + rc5.d/S01rsync | 1 + rc5.d/S01rsyslog | 1 + rc5.d/S01ssh | 1 + rc5.d/S01uuidd | 1 + rc5.d/S99webmin | 1 + rc6.d/K01apache-htcacheclean | 1 + rc6.d/K01apache2 | 1 + rc6.d/K01bind9 | 1 + rc6.d/K01irqbalance | 1 + rc6.d/K01mysql | 1 + rc6.d/K01plymouth | 1 + rc6.d/K01postfix | 1 + rc6.d/K01rsyslog | 1 + rc6.d/K01uuidd | 1 + rc6.d/K10webmin | 1 + rcS.d/S01apparmor | 1 + rcS.d/S01keyboard-setup.sh | 1 + rcS.d/S01kmod | 1 + rcS.d/S01plymouth-log | 1 + rcS.d/S01procps | 1 + rcS.d/S01udev | 1 + rcS.d/S01ufw | 1 + resolv.conf | 1 + resolvconf/update-libc.d/postfix | 13 + rmt | 8 + rpc | 40 + rsyslog.conf | 59 + rsyslog.d/20-ufw.conf | 7 + rsyslog.d/50-default.conf | 48 + rsyslog.d/postfix.conf | 4 + securetty | 412 ++ security/access.conf | 122 + security/capability.conf | 45 + security/group.conf | 106 + security/limits.conf | 56 + security/namespace.conf | 28 + security/namespace.init | 25 + security/opasswd | 0 security/pam_env.conf | 73 + security/sepermit.conf | 11 + security/time.conf | 65 + selinux/semanage.conf | 45 + services | 591 +++ shadow | 31 + shadow- | 31 + shells | 5 + skel/.bash_logout | 7 + skel/.bashrc | 117 + skel/.profile | 27 + ssh/moduli | 406 ++ ssh/ssh_config | 51 + ssh/ssh_host_ecdsa_key | 5 + ssh/ssh_host_ecdsa_key.pub | 1 + ssh/ssh_host_ed25519_key | 7 + ssh/ssh_host_ed25519_key.pub | 1 + ssh/ssh_host_rsa_key | 27 + ssh/ssh_host_rsa_key.pub | 1 + ssh/ssh_import_id | 4 + ssh/sshd_config | 123 + ssl/certs/02265526.0 | 1 + ssl/certs/03179a64.0 | 1 + ssl/certs/062cdee6.0 | 1 + ssl/certs/064e0aa9.0 | 1 + ssl/certs/06dc52d5.0 | 1 + ssl/certs/080911ac.0 | 1 + ssl/certs/09789157.0 | 1 + ssl/certs/0b1b94ef.0 | 1 + ssl/certs/0bf05006.0 | 1 + ssl/certs/0c4c9b6c.0 | 1 + ssl/certs/0f6fa695.0 | 1 + ssl/certs/106f3e4d.0 | 1 + ssl/certs/116bf586.0 | 1 + ssl/certs/128805a3.0 | 1 + ssl/certs/157753a5.0 | 1 + ssl/certs/1636090b.0 | 1 + ssl/certs/18856ac4.0 | 1 + ssl/certs/1d3472b9.0 | 1 + ssl/certs/1e08bfd1.0 | 1 + ssl/certs/1e09d511.0 | 1 + ssl/certs/244b5494.0 | 1 + ssl/certs/2ae6433e.0 | 1 + ssl/certs/2b349938.0 | 1 + ssl/certs/2c11d503.0 | 1 + ssl/certs/2c543cd1.0 | 1 + ssl/certs/2e4eed3c.0 | 1 + ssl/certs/2e5ac55d.0 | 1 + ssl/certs/32888f65.0 | 1 + ssl/certs/349f2832.0 | 1 + ssl/certs/3513523f.0 | 1 + ssl/certs/3bde41ac.0 | 1 + ssl/certs/3e44d2f7.0 | 1 + ssl/certs/3e45d192.0 | 1 + ssl/certs/40193066.0 | 1 + ssl/certs/4042bcee.0 | 1 + ssl/certs/40547a79.0 | 1 + ssl/certs/4304c5e5.0 | 1 + ssl/certs/451b5485.0 | 1 + ssl/certs/480720ec.0 | 1 + ssl/certs/48bec511.0 | 1 + ssl/certs/4a6481c9.0 | 1 + ssl/certs/4bfab552.0 | 1 + ssl/certs/4f316efb.0 | 1 + ssl/certs/5273a94c.0 | 1 + ssl/certs/5443e9e3.0 | 1 + ssl/certs/54657681.0 | 1 + ssl/certs/57bcb2da.0 | 1 + ssl/certs/5a4d6896.0 | 1 + ssl/certs/5ad8a5d6.0 | 1 + ssl/certs/5c44d531.0 | 1 + ssl/certs/5cd81ad7.0 | 1 + ssl/certs/5d3033c5.0 | 1 + ssl/certs/5f15c80c.0 | 1 + ssl/certs/607986c7.0 | 1 + ssl/certs/608a55ad.0 | 1 + ssl/certs/6410666e.0 | 1 + ssl/certs/653b494a.0 | 1 + ssl/certs/6b99d060.0 | 1 + ssl/certs/6d41d539.0 | 1 + ssl/certs/6fa5da56.0 | 1 + ssl/certs/706f604c.0 | 1 + ssl/certs/749e9e03.0 | 1 + ssl/certs/75d1b2ed.0 | 1 + ssl/certs/76cb8f92.0 | 1 + ssl/certs/76faf6c0.0 | 1 + ssl/certs/7719f463.0 | 1 + ssl/certs/7992b8bb.0 | 1 + ssl/certs/7aaf71c0.0 | 1 + ssl/certs/7d0b38bd.0 | 1 + ssl/certs/7f3d5d1d.0 | 1 + ssl/certs/812e17de.0 | 1 + ssl/certs/8160b96c.0 | 1 + ssl/certs/87229d21.0 | 1 + ssl/certs/8867006a.0 | 1 + ssl/certs/8cb5ee0f.0 | 1 + ssl/certs/8d86cdd1.0 | 1 + ssl/certs/9168f543.0 | 1 + ssl/certs/930ac5d2.0 | 1 + ssl/certs/93bc0acc.0 | 1 + ssl/certs/988a38cb.0 | 1 + ssl/certs/9c2e7d30.0 | 1 + ssl/certs/9c8dfbd4.0 | 1 + ssl/certs/9d04f354.0 | 1 + ssl/certs/9f0f5fd6.0 | 1 + ssl/certs/ACCVRAIZ1.pem | 1 + ssl/certs/AC_RAIZ_FNMT-RCM.pem | 1 + ssl/certs/Actalis_Authentication_Root_CA.pem | 1 + ssl/certs/AddTrust_External_Root.pem | 1 + ssl/certs/AffirmTrust_Commercial.pem | 1 + ssl/certs/AffirmTrust_Networking.pem | 1 + ssl/certs/AffirmTrust_Premium.pem | 1 + ssl/certs/AffirmTrust_Premium_ECC.pem | 1 + ssl/certs/Amazon_Root_CA_1.pem | 1 + ssl/certs/Amazon_Root_CA_2.pem | 1 + ssl/certs/Amazon_Root_CA_3.pem | 1 + ssl/certs/Amazon_Root_CA_4.pem | 1 + ssl/certs/Atos_TrustedRoot_2011.pem | 1 + ...icacion_Firmaprofesional_CIF_A62634068.pem | 1 + ssl/certs/Baltimore_CyberTrust_Root.pem | 1 + ssl/certs/Buypass_Class_2_Root_CA.pem | 1 + ssl/certs/Buypass_Class_3_Root_CA.pem | 1 + ssl/certs/CA_Disig_Root_R2.pem | 1 + ssl/certs/CFCA_EV_ROOT.pem | 1 + ssl/certs/COMODO_Certification_Authority.pem | 1 + .../COMODO_ECC_Certification_Authority.pem | 1 + .../COMODO_RSA_Certification_Authority.pem | 1 + ssl/certs/Certigna.pem | 1 + ssl/certs/Certinomis_-_Root_CA.pem | 1 + ssl/certs/Certplus_Class_2_Primary_CA.pem | 1 + ssl/certs/Certplus_Root_CA_G1.pem | 1 + ssl/certs/Certplus_Root_CA_G2.pem | 1 + ssl/certs/Certum_Trusted_Network_CA.pem | 1 + ssl/certs/Certum_Trusted_Network_CA_2.pem | 1 + .../Chambers_of_Commerce_Root_-_2008.pem | 1 + ssl/certs/Comodo_AAA_Services_root.pem | 1 + ssl/certs/Cybertrust_Global_Root.pem | 1 + ssl/certs/D-TRUST_Root_Class_3_CA_2_2009.pem | 1 + .../D-TRUST_Root_Class_3_CA_2_EV_2009.pem | 1 + ssl/certs/DST_Root_CA_X3.pem | 1 + ssl/certs/Deutsche_Telekom_Root_CA_2.pem | 1 + ssl/certs/DigiCert_Assured_ID_Root_CA.pem | 1 + ssl/certs/DigiCert_Assured_ID_Root_G2.pem | 1 + ssl/certs/DigiCert_Assured_ID_Root_G3.pem | 1 + ssl/certs/DigiCert_Global_Root_CA.pem | 1 + ssl/certs/DigiCert_Global_Root_G2.pem | 1 + ssl/certs/DigiCert_Global_Root_G3.pem | 1 + .../DigiCert_High_Assurance_EV_Root_CA.pem | 1 + ssl/certs/DigiCert_Trusted_Root_G4.pem | 1 + ssl/certs/E-Tugra_Certification_Authority.pem | 1 + ssl/certs/EC-ACC.pem | 1 + ssl/certs/EE_Certification_Centre_Root_CA.pem | 1 + ...rust.net_Premium_2048_Secure_Server_CA.pem | 1 + .../Entrust_Root_Certification_Authority.pem | 1 + ...ust_Root_Certification_Authority_-_EC1.pem | 1 + ...rust_Root_Certification_Authority_-_G2.pem | 1 + ssl/certs/GDCA_TrustAUTH_R5_ROOT.pem | 1 + ssl/certs/GeoTrust_Global_CA.pem | 1 + ...oTrust_Primary_Certification_Authority.pem | 1 + ...t_Primary_Certification_Authority_-_G2.pem | 1 + ...t_Primary_Certification_Authority_-_G3.pem | 1 + ssl/certs/GeoTrust_Universal_CA.pem | 1 + ssl/certs/GeoTrust_Universal_CA_2.pem | 1 + ssl/certs/GlobalSign_ECC_Root_CA_-_R4.pem | 1 + ssl/certs/GlobalSign_ECC_Root_CA_-_R5.pem | 1 + ssl/certs/GlobalSign_Root_CA.pem | 1 + ssl/certs/GlobalSign_Root_CA_-_R2.pem | 1 + ssl/certs/GlobalSign_Root_CA_-_R3.pem | 1 + ssl/certs/Global_Chambersign_Root_-_2008.pem | 1 + ssl/certs/Go_Daddy_Class_2_CA.pem | 1 + ..._Daddy_Root_Certificate_Authority_-_G2.pem | 1 + ..._Research_Institutions_ECC_RootCA_2015.pem | 1 + ..._and_Research_Institutions_RootCA_2011.pem | 1 + ..._and_Research_Institutions_RootCA_2015.pem | 1 + ssl/certs/Hongkong_Post_Root_CA_1.pem | 1 + ssl/certs/ISRG_Root_X1.pem | 1 + ssl/certs/IdenTrust_Commercial_Root_CA_1.pem | 1 + .../IdenTrust_Public_Sector_Root_CA_1.pem | 1 + ssl/certs/Izenpe.com.pem | 1 + ssl/certs/LuxTrust_Global_Root_2.pem | 1 + ssl/certs/Microsec_e-Szigno_Root_CA_2009.pem | 1 + ...5\221tan\303\272s\303\255tv\303\241ny.pem" | 1 + ...etwork_Solutions_Certificate_Authority.pem | 1 + ssl/certs/OISTE_WISeKey_Global_Root_GA_CA.pem | 1 + ssl/certs/OISTE_WISeKey_Global_Root_GB_CA.pem | 1 + ssl/certs/OpenTrust_Root_CA_G1.pem | 1 + ssl/certs/OpenTrust_Root_CA_G2.pem | 1 + ssl/certs/OpenTrust_Root_CA_G3.pem | 1 + ssl/certs/QuoVadis_Root_CA.pem | 1 + ssl/certs/QuoVadis_Root_CA_1_G3.pem | 1 + ssl/certs/QuoVadis_Root_CA_2.pem | 1 + ssl/certs/QuoVadis_Root_CA_2_G3.pem | 1 + ssl/certs/QuoVadis_Root_CA_3.pem | 1 + ssl/certs/QuoVadis_Root_CA_3_G3.pem | 1 + ...om_EV_Root_Certification_Authority_ECC.pem | 1 + ...EV_Root_Certification_Authority_RSA_R2.pem | 1 + ...L.com_Root_Certification_Authority_ECC.pem | 1 + ...L.com_Root_Certification_Authority_RSA.pem | 1 + ssl/certs/SZAFIR_ROOT_CA2.pem | 1 + ssl/certs/SecureSign_RootCA11.pem | 1 + ssl/certs/SecureTrust_CA.pem | 1 + ssl/certs/Secure_Global_CA.pem | 1 + ssl/certs/Security_Communication_RootCA2.pem | 1 + ssl/certs/Security_Communication_Root_CA.pem | 1 + ssl/certs/Sonera_Class_2_Root_CA.pem | 1 + .../Staat_der_Nederlanden_EV_Root_CA.pem | 1 + .../Staat_der_Nederlanden_Root_CA_-_G2.pem | 1 + .../Staat_der_Nederlanden_Root_CA_-_G3.pem | 1 + ssl/certs/Starfield_Class_2_CA.pem | 1 + ...rfield_Root_Certificate_Authority_-_G2.pem | 1 + ...rvices_Root_Certificate_Authority_-_G2.pem | 1 + ssl/certs/SwissSign_Gold_CA_-_G2.pem | 1 + ssl/certs/SwissSign_Silver_CA_-_G2.pem | 1 + ssl/certs/T-TeleSec_GlobalRoot_Class_2.pem | 1 + ssl/certs/T-TeleSec_GlobalRoot_Class_3.pem | 1 + ..._Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.pem | 1 + ssl/certs/TWCA_Global_Root_CA.pem | 1 + .../TWCA_Root_Certification_Authority.pem | 1 + ssl/certs/Taiwan_GRCA.pem | 1 + ssl/certs/TeliaSonera_Root_CA_v1.pem | 1 + ssl/certs/TrustCor_ECA-1.pem | 1 + ssl/certs/TrustCor_RootCert_CA-1.pem | 1 + ssl/certs/TrustCor_RootCert_CA-2.pem | 1 + ssl/certs/Trustis_FPS_Root_CA.pem | 1 + ...4\237lay\304\261c\304\261s\304\261_H5.pem" | 1 + .../USERTrust_ECC_Certification_Authority.pem | 1 + .../USERTrust_RSA_Certification_Authority.pem | 1 + ...c_Primary_Certification_Authority_-_G4.pem | 1 + ...c_Primary_Certification_Authority_-_G5.pem | 1 + ...Universal_Root_Certification_Authority.pem | 1 + ...c_Primary_Certification_Authority_-_G3.pem | 1 + ssl/certs/Visa_eCommerce_Root.pem | 1 + ssl/certs/XRamp_Global_CA_Root.pem | 1 + ssl/certs/a760e1bd.0 | 1 + ssl/certs/a94d09e5.0 | 1 + ssl/certs/ad088e1d.0 | 1 + ssl/certs/aee5f10d.0 | 1 + ssl/certs/b0e59380.0 | 1 + ssl/certs/b1159c4c.0 | 1 + ssl/certs/b1b8a7f3.0 | 1 + ssl/certs/b204d74a.0 | 1 + ssl/certs/b66938e9.0 | 1 + ssl/certs/b727005e.0 | 1 + ssl/certs/b7a5b843.0 | 1 + ssl/certs/ba89ed3b.0 | 1 + ssl/certs/c01cdfa2.0 | 1 + ssl/certs/c089bbbd.0 | 1 + ssl/certs/c0ff1f52.0 | 1 + ssl/certs/c28a8a30.0 | 1 + ssl/certs/c47d9980.0 | 1 + ssl/certs/ca-certificates.crt | 3408 +++++++++++++++++ ssl/certs/ca6e4ad9.0 | 1 + ssl/certs/cb6768fd | 1 + ssl/certs/cbf06781.0 | 1 + ssl/certs/cc450945.0 | 1 + ssl/certs/cd58d51e.0 | 1 + ssl/certs/cd8c0d63.0 | 1 + ssl/certs/ce5e74ef.0 | 1 + ssl/certs/certSIGN_ROOT_CA.pem | 1 + ssl/certs/d4dae3dd.0 | 1 + ssl/certs/d6325660.0 | 1 + ssl/certs/d7e8dc79.0 | 1 + ssl/certs/d853d49e.0 | 1 + ssl/certs/dd8e9d41.0 | 1 + ssl/certs/de6d66f3.0 | 1 + ssl/certs/def36a68.0 | 1 + ssl/certs/e113c810.0 | 1 + ssl/certs/e18bfb83.0 | 1 + ssl/certs/e2799e36.0 | 1 + ssl/certs/e36a6752.0 | 1 + ssl/certs/e73d606e.0 | 1 + ssl/certs/e8de2f56.0 | 1 + .../ePKI_Root_Certification_Authority.pem | 1 + ssl/certs/ee64a828.0 | 1 + ssl/certs/eed8c118.0 | 1 + ssl/certs/ef954a4e.0 | 1 + ssl/certs/f060240e.0 | 1 + ssl/certs/f081611a.0 | 1 + ssl/certs/f0c70a8d.0 | 1 + ssl/certs/f30dd6ad.0 | 1 + ssl/certs/f3377b1b.0 | 1 + ssl/certs/f387163d.0 | 1 + ssl/certs/f39fc864.0 | 1 + ssl/certs/fc5a8f99.0 | 1 + ssl/certs/fe8a2cd8.0 | 1 + ssl/certs/ff34af3f.0 | 1 + ssl/certs/ssl-cert-snakeoil.pem | 19 + ssl/certs/thawte_Primary_Root_CA.pem | 1 + ssl/certs/thawte_Primary_Root_CA_-_G2.pem | 1 + ssl/certs/thawte_Primary_Root_CA_-_G3.pem | 1 + ssl/openssl.cnf | 352 ++ ssl/private/ssl-cert-snakeoil.key | 28 + subgid | 1 + subgid- | 0 subuid | 1 + subuid- | 0 sudoers | 30 + sudoers.d/README | 21 + sysctl.conf | 69 + sysctl.d/10-console-messages.conf | 3 + sysctl.d/10-ipv6-privacy.conf | 12 + sysctl.d/10-kernel-hardening.conf | 15 + sysctl.d/10-link-restrictions.conf | 5 + sysctl.d/10-magic-sysrq.conf | 26 + sysctl.d/10-network-security.conf | 6 + sysctl.d/10-ptrace.conf | 22 + sysctl.d/10-zeropage.conf | 9 + sysctl.d/99-sysctl.conf | 1 + sysctl.d/README.sysctl | 16 + sysctl.d/protect-links.conf | 8 + systemd/journald.conf | 42 + systemd/logind.conf | 37 + systemd/resolved.conf | 23 + systemd/system.conf | 66 + .../dbus-org.freedesktop.resolve1.service | 1 + .../dbus-org.freedesktop.timesync1.service | 1 + .../set-route-network.service | 1 + .../getty.target.wants/getty@tty1.service | 1 + .../accounts-daemon.service | 1 + .../multi-user.target.wants/apache2.service | 1 + .../multi-user.target.wants/bind9.service | 1 + .../console-setup.service | 1 + .../multi-user.target.wants/cron.service | 1 + .../multi-user.target.wants/etckeeper.timer | 1 + .../irqbalance.service | 1 + .../multi-user.target.wants/mysql.service | 1 + .../networkd-dispatcher.service | 1 + .../multi-user.target.wants/ondemand.service | 1 + .../multi-user.target.wants/postfix.service | 1 + .../multi-user.target.wants/remote-fs.target | 1 + .../multi-user.target.wants/rsync.service | 1 + .../multi-user.target.wants/rsyslog.service | 1 + .../multi-user.target.wants/ssh.service | 1 + .../systemd-resolved.service | 1 + .../multi-user.target.wants/ufw.service | 1 + systemd/system/paths.target.wants/acpid.path | 1 + systemd/system/set-route-network.service | 8 + .../system/sockets.target.wants/acpid.socket | 1 + .../system/sockets.target.wants/uuidd.socket | 1 + systemd/system/sshd.service | 1 + .../sysinit.target.wants/apparmor.service | 1 + .../grub-initrd-fallback.service | 1 + .../keyboard-setup.service | 1 + .../sysinit.target.wants/setvtrgb.service | 1 + .../systemd-timesyncd.service | 1 + systemd/system/syslog.service | 1 + .../apt-daily-upgrade.timer | 1 + .../timers.target.wants/apt-daily.timer | 1 + .../system/timers.target.wants/fstrim.timer | 1 + .../timers.target.wants/logrotate.timer | 1 + .../timers.target.wants/motd-news.timer | 1 + .../timers.target.wants/phpsessionclean.timer | 1 + systemd/timesyncd.conf | 19 + systemd/user.conf | 44 + terminfo/README | 3 + timezone | 1 + ucf.conf | 39 + udev/udev.conf | 6 + ufw/after.init | 40 + ufw/after.rules | 30 + ufw/after6.rules | 27 + ufw/applications.d/apache2-utils.ufw.profile | 14 + ufw/applications.d/bind9 | 5 + ufw/applications.d/openssh-server | 4 + ufw/applications.d/postfix | 14 + ufw/before.init | 40 + ufw/before.rules | 77 + ufw/before6.rules | 138 + ufw/sysctl.conf | 41 + ufw/ufw.conf | 10 + ufw/user.rules | 11 + ufw/user6.rules | 6 + update-manager/meta-release | 7 + update-manager/release-upgrades | 16 + update-motd.d/00-header | 29 + update-motd.d/10-help-text | 26 + update-motd.d/50-motd-news | 123 + update-motd.d/80-esm | 24 + update-motd.d/80-livepatch | 93 + update-motd.d/91-release-upgrade | 9 + updatedb.conf | 4 + vim/vimrc | 61 + vim/vimrc.tiny | 13 + vtrgb | 1 + webmin/acl/config | 3 + webmin/adsl-client/config | 7 + webmin/ajaxterm/config | 2 + webmin/apache/config | 24 + webmin/at/config | 2 + webmin/backup-config/config | 3 + webmin/bacula-backup/config | 12 + webmin/bandwidth/config | 2 + webmin/bind8/config | 45 + webmin/burner/config | 6 + webmin/change-user/config | 0 webmin/cluster-copy/config | 1 + webmin/cluster-cron/config | 0 webmin/cluster-passwd/config | 3 + webmin/cluster-shell/config | 0 webmin/cluster-software/config | 2 + webmin/cluster-useradmin/config | 9 + webmin/cluster-usermin/config | 2 + webmin/cluster-webmin/config | 2 + webmin/config | 20 + webmin/cpan/config | 6 + webmin/cron/config | 24 + webmin/custom/config | 4 + webmin/dfsadmin/config | 0 webmin/dhcpd/config | 16 + webmin/dovecot/config | 4 + webmin/exim/config | 8 + webmin/exports/config | 3 + webmin/fail2ban/config | 4 + webmin/failed.pl | 12 + webmin/fdisk/config | 1 + webmin/fetchmail/config | 6 + webmin/file/config | 21 + webmin/filemin/config | 1 + webmin/filter/config | 6 + webmin/firewall/config | 6 + webmin/firewall6/config | 6 + webmin/firewalld/config | 2 + webmin/first-install | 1 + webmin/fsdump/config | 7 + webmin/grub/config | 3 + webmin/heartbeat/config | 15 + webmin/htaccess-htpasswd/config | 8 + webmin/idmapd/config | 3 + webmin/inetd/config | 16 + webmin/init/config | 17 + webmin/inittab/config | 2 + webmin/installed.cache | 111 + webmin/ipfilter/config | 9 + webmin/ipfw/config | 6 + webmin/ipsec/config | 8 + webmin/iscsi-client/config | 6 + webmin/iscsi-server/config | 6 + webmin/iscsi-target/config | 7 + webmin/iscsi-tgtd/config | 5 + webmin/jabber/config | 5 + webmin/krb5/config | 1 + webmin/ldap-client/config | 3 + webmin/ldap-server/config | 10 + webmin/ldap-useradmin/config | 24 + webmin/login.pl | 12 + webmin/logout.pl | 12 + webmin/logrotate/config | 4 + webmin/lpadmin/config | 17 + webmin/lvm/config | 2 + webmin/mailboxes/config | 52 + webmin/mailcap/config | 1 + webmin/man/config | 9 + webmin/miniserv.conf | 45 + webmin/miniserv.pem | 51 + webmin/miniserv.users | 1 + webmin/mon/config | 7 + webmin/mount/config | 8 + webmin/mysql/config | 23 + webmin/net/config | 2 + webmin/nis/config | 5 + webmin/openslp/config | 5 + webmin/package-updates/config | 2 + webmin/pam/config | 4 + webmin/pap/config | 8 + webmin/passwd/config | 3 + webmin/perl-path | 1 + webmin/phpini/config | 1 + webmin/postfix/config | 28 + webmin/postfix/version | 1 + webmin/postgresql/config | 24 + webmin/ppp-client/config | 3 + webmin/pptp-client/config | 5 + webmin/pptp-server/config | 9 + webmin/proc/config | 6 + webmin/procmail/config | 3 + webmin/proftpd/config | 9 + webmin/qmailadmin/config | 14 + webmin/quota/config | 25 + webmin/raid/config | 3 + webmin/reload | 4 + webmin/restart | 2 + webmin/samba/config | 18 + webmin/sarg/config | 4 + webmin/sendmail/config | 30 + webmin/servers/config | 11 + webmin/shell/config | 3 + webmin/shorewall/config | 5 + webmin/shorewall6/config | 5 + webmin/smart-status/config | 4 + webmin/smf/config | 0 webmin/software/config | 3 + webmin/spam/config | 12 + webmin/squid/config | 21 + webmin/sshd/config | 11 + webmin/start | 11 + webmin/status/config | 13 + webmin/stop | 4 + webmin/stunnel/config | 1 + webmin/syslog-ng/config | 7 + webmin/syslog/config | 19 + webmin/system-status/config | 2 + webmin/system-status/enable-collection.pl | 12 + webmin/tcpwrappers/config | 3 + webmin/telnet/config | 5 + webmin/time/config | 5 + webmin/tunnel/config | 1 + webmin/uninstall.sh | 9 + webmin/updown/config | 4 + webmin/useradmin/config | 41 + webmin/usermin/config | 7 + webmin/var-path | 1 + webmin/version | 1 + webmin/vgetty/config | 2 + webmin/webalizer/config | 6 + webmin/webmin.acl | 1 + webmin/webmin/config | 9 + webmin/webmincron/config | 0 webmin/webmincron/crons/15494592565952.cron | 4 + webmin/webmincron/crons/15494592566441.cron | 5 + webmin/webminlog/config | 1 + webmin/wuftpd/config | 8 + webmin/xinetd/config | 5 + wgetrc | 138 + xdg/autostart/xdg-user-dirs.desktop | 11 + xdg/systemd/user | 1 + xdg/user-dirs.conf | 11 + xdg/user-dirs.defaults | 16 + zsh_command_not_found | 14 + 1685 files changed, 45347 insertions(+) create mode 100755 .etckeeper create mode 100644 .gitignore create mode 100644 X11/Xsession.d/90gpg-agent create mode 100644 adduser.conf create mode 100644 aliases create mode 100644 aliases.db create mode 100644 alternatives/README create mode 120000 alternatives/awk create mode 120000 alternatives/awk.1.gz create mode 120000 alternatives/builtins.7.gz create mode 120000 alternatives/dotlock create mode 120000 alternatives/dotlock.1.gz create mode 120000 alternatives/editor create mode 120000 alternatives/editor.1.gz create mode 120000 alternatives/ex create mode 120000 alternatives/ex.1.gz create mode 120000 alternatives/ex.fr.1.gz create mode 120000 alternatives/ex.it.1.gz create mode 120000 alternatives/ex.ja.1.gz create mode 120000 alternatives/ex.pl.1.gz create mode 120000 alternatives/ex.ru.1.gz create mode 120000 alternatives/frm create mode 120000 alternatives/frm.1.gz create mode 120000 alternatives/from create mode 120000 alternatives/from.1.gz create mode 120000 alternatives/ftp create mode 120000 alternatives/ftp.1.gz create mode 120000 alternatives/infobrowser create mode 120000 alternatives/infobrowser.1.gz create mode 120000 alternatives/locate create mode 120000 alternatives/locate.1.gz create mode 120000 alternatives/lzcat create mode 120000 alternatives/lzcat.1.gz create mode 120000 alternatives/lzcmp create mode 120000 alternatives/lzcmp.1.gz create mode 120000 alternatives/lzdiff create mode 120000 alternatives/lzdiff.1.gz create mode 120000 alternatives/lzegrep create mode 120000 alternatives/lzegrep.1.gz create mode 120000 alternatives/lzfgrep create mode 120000 alternatives/lzfgrep.1.gz create mode 120000 alternatives/lzgrep create mode 120000 alternatives/lzgrep.1.gz create mode 120000 alternatives/lzless create mode 120000 alternatives/lzless.1.gz create mode 120000 alternatives/lzma create mode 120000 alternatives/lzma.1.gz create mode 120000 alternatives/lzmore create mode 120000 alternatives/lzmore.1.gz create mode 120000 alternatives/mail create mode 120000 alternatives/mail.1.gz create mode 120000 alternatives/mailx create mode 120000 alternatives/mailx.1.gz create mode 120000 alternatives/messages create mode 120000 alternatives/messages.1.gz create mode 120000 alternatives/movemail create mode 120000 alternatives/movemail.1.gz create mode 120000 alternatives/mt create mode 120000 alternatives/mt.1.gz create mode 120000 alternatives/my.cnf create mode 120000 alternatives/nawk create mode 120000 alternatives/nawk.1.gz create mode 120000 alternatives/nc create mode 120000 alternatives/nc.1.gz create mode 120000 alternatives/netcat create mode 120000 alternatives/netcat.1.gz create mode 120000 alternatives/netrc.5.gz create mode 120000 alternatives/newt-palette create mode 120000 alternatives/pager create mode 120000 alternatives/pager.1.gz create mode 120000 alternatives/pftp create mode 120000 alternatives/pftp.1.gz create mode 120000 alternatives/phar create mode 120000 alternatives/phar.1.gz create mode 120000 alternatives/phar.phar create mode 120000 alternatives/phar.phar.1.gz create mode 120000 alternatives/php create mode 120000 alternatives/php.1.gz create mode 120000 alternatives/pico create mode 120000 alternatives/pico.1.gz create mode 120000 alternatives/pinentry create mode 120000 alternatives/pinentry.1.gz create mode 120000 alternatives/rcp create mode 120000 alternatives/rcp.1.gz create mode 120000 alternatives/readmsg create mode 120000 alternatives/readmsg.1.gz create mode 120000 alternatives/rlogin create mode 120000 alternatives/rlogin.1.gz create mode 120000 alternatives/rmt create mode 120000 alternatives/rmt.8.gz create mode 120000 alternatives/rsh create mode 120000 alternatives/rsh.1.gz create mode 120000 alternatives/rview create mode 120000 alternatives/rvim create mode 120000 alternatives/telnet create mode 120000 alternatives/telnet.1.gz create mode 120000 alternatives/text.plymouth create mode 120000 alternatives/traceroute6 create mode 120000 alternatives/traceroute6.8.gz create mode 120000 alternatives/unlzma create mode 120000 alternatives/unlzma.1.gz create mode 120000 alternatives/updatedb create mode 120000 alternatives/updatedb.8.gz create mode 120000 alternatives/vi create mode 120000 alternatives/vi.1.gz create mode 120000 alternatives/vi.fr.1.gz create mode 120000 alternatives/vi.it.1.gz create mode 120000 alternatives/vi.ja.1.gz create mode 120000 alternatives/vi.pl.1.gz create mode 120000 alternatives/vi.ru.1.gz create mode 120000 alternatives/view create mode 120000 alternatives/view.1.gz create mode 120000 alternatives/view.fr.1.gz create mode 120000 alternatives/view.it.1.gz create mode 120000 alternatives/view.ja.1.gz create mode 120000 alternatives/view.pl.1.gz create mode 120000 alternatives/view.ru.1.gz create mode 120000 alternatives/vim create mode 120000 alternatives/vimdiff create mode 120000 alternatives/vtrgb create mode 120000 alternatives/w create mode 120000 alternatives/w.1.gz create mode 120000 alternatives/write create mode 120000 alternatives/write.1.gz create mode 100644 apache2/apache2.conf create mode 100644 apache2/conf-available/charset.conf create mode 100644 apache2/conf-available/javascript-common.conf create mode 100644 apache2/conf-available/localized-error-pages.conf create mode 100644 apache2/conf-available/other-vhosts-access-log.conf create mode 120000 apache2/conf-available/phpmyadmin.conf create mode 100644 apache2/conf-available/security.conf create mode 100644 apache2/conf-available/serve-cgi-bin.conf create mode 120000 apache2/conf-enabled/charset.conf create mode 120000 apache2/conf-enabled/javascript-common.conf create mode 120000 apache2/conf-enabled/localized-error-pages.conf create mode 120000 apache2/conf-enabled/other-vhosts-access-log.conf create mode 120000 apache2/conf-enabled/phpmyadmin.conf create mode 120000 apache2/conf-enabled/security.conf create mode 120000 apache2/conf-enabled/serve-cgi-bin.conf create mode 100644 apache2/envvars create mode 100644 apache2/magic create mode 100644 apache2/mods-available/access_compat.load create mode 100644 apache2/mods-available/actions.conf create mode 100644 apache2/mods-available/actions.load create mode 100644 apache2/mods-available/alias.conf create mode 100644 apache2/mods-available/alias.load create mode 100644 apache2/mods-available/allowmethods.load create mode 100644 apache2/mods-available/asis.load create mode 100644 apache2/mods-available/auth_basic.load create mode 100644 apache2/mods-available/auth_digest.load create mode 100644 apache2/mods-available/auth_form.load create mode 100644 apache2/mods-available/authn_anon.load create mode 100644 apache2/mods-available/authn_core.load create mode 100644 apache2/mods-available/authn_dbd.load create mode 100644 apache2/mods-available/authn_dbm.load create mode 100644 apache2/mods-available/authn_file.load create mode 100644 apache2/mods-available/authn_socache.load create mode 100644 apache2/mods-available/authnz_fcgi.load create mode 100644 apache2/mods-available/authnz_ldap.load create mode 100644 apache2/mods-available/authz_core.load create mode 100644 apache2/mods-available/authz_dbd.load create mode 100644 apache2/mods-available/authz_dbm.load create mode 100644 apache2/mods-available/authz_groupfile.load create mode 100644 apache2/mods-available/authz_host.load create mode 100644 apache2/mods-available/authz_owner.load create mode 100644 apache2/mods-available/authz_user.load create mode 100644 apache2/mods-available/autoindex.conf create mode 100644 apache2/mods-available/autoindex.load create mode 100644 apache2/mods-available/brotli.load create mode 100644 apache2/mods-available/buffer.load create mode 100644 apache2/mods-available/cache.load create mode 100644 apache2/mods-available/cache_disk.conf create mode 100644 apache2/mods-available/cache_disk.load create mode 100644 apache2/mods-available/cache_socache.load create mode 100644 apache2/mods-available/cern_meta.load create mode 100644 apache2/mods-available/cgi.load create mode 100644 apache2/mods-available/cgid.conf create mode 100644 apache2/mods-available/cgid.load create mode 100644 apache2/mods-available/charset_lite.load create mode 100644 apache2/mods-available/data.load create mode 100644 apache2/mods-available/dav.load create mode 100644 apache2/mods-available/dav_fs.conf create mode 100644 apache2/mods-available/dav_fs.load create mode 100644 apache2/mods-available/dav_lock.load create mode 100644 apache2/mods-available/dbd.load create mode 100644 apache2/mods-available/deflate.conf create mode 100644 apache2/mods-available/deflate.load create mode 100644 apache2/mods-available/dialup.load create mode 100644 apache2/mods-available/dir.conf create mode 100644 apache2/mods-available/dir.load create mode 100644 apache2/mods-available/dump_io.load create mode 100644 apache2/mods-available/echo.load create mode 100644 apache2/mods-available/env.load create mode 100644 apache2/mods-available/expires.load create mode 100644 apache2/mods-available/ext_filter.load create mode 100644 apache2/mods-available/file_cache.load create mode 100644 apache2/mods-available/filter.load create mode 100644 apache2/mods-available/headers.load create mode 100644 apache2/mods-available/heartbeat.load create mode 100644 apache2/mods-available/heartmonitor.load create mode 100644 apache2/mods-available/http2.load create mode 100644 apache2/mods-available/ident.load create mode 100644 apache2/mods-available/imagemap.load create mode 100644 apache2/mods-available/include.load create mode 100644 apache2/mods-available/info.conf create mode 100644 apache2/mods-available/info.load create mode 100644 apache2/mods-available/lbmethod_bybusyness.load create mode 100644 apache2/mods-available/lbmethod_byrequests.load create mode 100644 apache2/mods-available/lbmethod_bytraffic.load create mode 100644 apache2/mods-available/lbmethod_heartbeat.load create mode 100644 apache2/mods-available/ldap.conf create mode 100644 apache2/mods-available/ldap.load create mode 100644 apache2/mods-available/log_debug.load create mode 100644 apache2/mods-available/log_forensic.load create mode 100644 apache2/mods-available/lua.load create mode 100644 apache2/mods-available/macro.load create mode 100644 apache2/mods-available/mime.conf create mode 100644 apache2/mods-available/mime.load create mode 100644 apache2/mods-available/mime_magic.conf create mode 100644 apache2/mods-available/mime_magic.load create mode 100644 apache2/mods-available/mpm_event.conf create mode 100644 apache2/mods-available/mpm_event.load create mode 100644 apache2/mods-available/mpm_prefork.conf create mode 100644 apache2/mods-available/mpm_prefork.load create mode 100644 apache2/mods-available/mpm_worker.conf create mode 100644 apache2/mods-available/mpm_worker.load create mode 100644 apache2/mods-available/negotiation.conf create mode 100644 apache2/mods-available/negotiation.load create mode 100644 apache2/mods-available/php7.2.conf create mode 100644 apache2/mods-available/php7.2.load create mode 100644 apache2/mods-available/proxy.conf create mode 100644 apache2/mods-available/proxy.load create mode 100644 apache2/mods-available/proxy_ajp.load create mode 100644 apache2/mods-available/proxy_balancer.conf create mode 100644 apache2/mods-available/proxy_balancer.load create mode 100644 apache2/mods-available/proxy_connect.load create mode 100644 apache2/mods-available/proxy_express.load create mode 100644 apache2/mods-available/proxy_fcgi.load create mode 100644 apache2/mods-available/proxy_fdpass.load create mode 100644 apache2/mods-available/proxy_ftp.conf create mode 100644 apache2/mods-available/proxy_ftp.load create mode 100644 apache2/mods-available/proxy_hcheck.load create mode 100644 apache2/mods-available/proxy_html.conf create mode 100644 apache2/mods-available/proxy_html.load create mode 100644 apache2/mods-available/proxy_http.load create mode 100644 apache2/mods-available/proxy_http2.load create mode 100644 apache2/mods-available/proxy_scgi.load create mode 100644 apache2/mods-available/proxy_uwsgi.load create mode 100644 apache2/mods-available/proxy_wstunnel.load create mode 100644 apache2/mods-available/ratelimit.load create mode 100644 apache2/mods-available/reflector.load create mode 100644 apache2/mods-available/remoteip.load create mode 100644 apache2/mods-available/reqtimeout.conf create mode 100644 apache2/mods-available/reqtimeout.load create mode 100644 apache2/mods-available/request.load create mode 100644 apache2/mods-available/rewrite.load create mode 100644 apache2/mods-available/sed.load create mode 100644 apache2/mods-available/session.load create mode 100644 apache2/mods-available/session_cookie.load create mode 100644 apache2/mods-available/session_crypto.load create mode 100644 apache2/mods-available/session_dbd.load create mode 100644 apache2/mods-available/setenvif.conf create mode 100644 apache2/mods-available/setenvif.load create mode 100644 apache2/mods-available/slotmem_plain.load create mode 100644 apache2/mods-available/slotmem_shm.load create mode 100644 apache2/mods-available/socache_dbm.load create mode 100644 apache2/mods-available/socache_memcache.load create mode 100644 apache2/mods-available/socache_shmcb.load create mode 100644 apache2/mods-available/speling.load create mode 100644 apache2/mods-available/ssl.conf create mode 100644 apache2/mods-available/ssl.load create mode 100644 apache2/mods-available/status.conf create mode 100644 apache2/mods-available/status.load create mode 100644 apache2/mods-available/substitute.load create mode 100644 apache2/mods-available/suexec.load create mode 100644 apache2/mods-available/unique_id.load create mode 100644 apache2/mods-available/userdir.conf create mode 100644 apache2/mods-available/userdir.load create mode 100644 apache2/mods-available/usertrack.load create mode 100644 apache2/mods-available/vhost_alias.load create mode 100644 apache2/mods-available/xml2enc.load create mode 120000 apache2/mods-enabled/access_compat.load create mode 120000 apache2/mods-enabled/alias.conf create mode 120000 apache2/mods-enabled/alias.load create mode 120000 apache2/mods-enabled/auth_basic.load create mode 120000 apache2/mods-enabled/authn_core.load create mode 120000 apache2/mods-enabled/authn_file.load create mode 120000 apache2/mods-enabled/authz_core.load create mode 120000 apache2/mods-enabled/authz_host.load create mode 120000 apache2/mods-enabled/authz_user.load create mode 120000 apache2/mods-enabled/autoindex.conf create mode 120000 apache2/mods-enabled/autoindex.load create mode 120000 apache2/mods-enabled/deflate.conf create mode 120000 apache2/mods-enabled/deflate.load create mode 120000 apache2/mods-enabled/dir.conf create mode 120000 apache2/mods-enabled/dir.load create mode 120000 apache2/mods-enabled/env.load create mode 120000 apache2/mods-enabled/filter.load create mode 120000 apache2/mods-enabled/mime.conf create mode 120000 apache2/mods-enabled/mime.load create mode 120000 apache2/mods-enabled/mpm_prefork.conf create mode 120000 apache2/mods-enabled/mpm_prefork.load create mode 120000 apache2/mods-enabled/negotiation.conf create mode 120000 apache2/mods-enabled/negotiation.load create mode 120000 apache2/mods-enabled/php7.2.conf create mode 120000 apache2/mods-enabled/php7.2.load create mode 120000 apache2/mods-enabled/reqtimeout.conf create mode 120000 apache2/mods-enabled/reqtimeout.load create mode 120000 apache2/mods-enabled/setenvif.conf create mode 120000 apache2/mods-enabled/setenvif.load create mode 120000 apache2/mods-enabled/status.conf create mode 120000 apache2/mods-enabled/status.load create mode 100644 apache2/ports.conf create mode 100644 apache2/sites-available/000-default.conf create mode 100644 apache2/sites-available/default-ssl.conf create mode 120000 apache2/sites-enabled/000-default.conf create mode 100755 apm/event.d/20hdparm create mode 100644 apparmor.d/abstractions/X create mode 100644 apparmor.d/abstractions/apache2-common create mode 100644 apparmor.d/abstractions/apparmor_api/change_profile create mode 100644 apparmor.d/abstractions/apparmor_api/examine create mode 100644 apparmor.d/abstractions/apparmor_api/find_mountpoint create mode 100644 apparmor.d/abstractions/apparmor_api/introspect create mode 100644 apparmor.d/abstractions/apparmor_api/is_enabled create mode 100644 apparmor.d/abstractions/aspell create mode 100644 apparmor.d/abstractions/audio create mode 100644 apparmor.d/abstractions/authentication create mode 100644 apparmor.d/abstractions/base create mode 100644 apparmor.d/abstractions/bash create mode 100644 apparmor.d/abstractions/consoles create mode 100644 apparmor.d/abstractions/cups-client create mode 100644 apparmor.d/abstractions/dbus create mode 100644 apparmor.d/abstractions/dbus-accessibility create mode 100644 apparmor.d/abstractions/dbus-accessibility-strict create mode 100644 apparmor.d/abstractions/dbus-session create mode 100644 apparmor.d/abstractions/dbus-session-strict create mode 100644 apparmor.d/abstractions/dbus-strict create mode 100644 apparmor.d/abstractions/dconf create mode 100644 apparmor.d/abstractions/dovecot-common create mode 100644 apparmor.d/abstractions/enchant create mode 100644 apparmor.d/abstractions/fcitx create mode 100644 apparmor.d/abstractions/fcitx-strict create mode 100644 apparmor.d/abstractions/fonts create mode 100644 apparmor.d/abstractions/freedesktop.org create mode 100644 apparmor.d/abstractions/gnome create mode 100644 apparmor.d/abstractions/gnupg create mode 100644 apparmor.d/abstractions/ibus create mode 100644 apparmor.d/abstractions/kde create mode 100644 apparmor.d/abstractions/kerberosclient create mode 100644 apparmor.d/abstractions/launchpad-integration create mode 100644 apparmor.d/abstractions/ldapclient create mode 100644 apparmor.d/abstractions/libpam-systemd create mode 100644 apparmor.d/abstractions/likewise create mode 100644 apparmor.d/abstractions/mdns create mode 100644 apparmor.d/abstractions/mir create mode 100644 apparmor.d/abstractions/mozc create mode 100644 apparmor.d/abstractions/mysql create mode 100644 apparmor.d/abstractions/nameservice create mode 100644 apparmor.d/abstractions/nis create mode 100644 apparmor.d/abstractions/nvidia create mode 100644 apparmor.d/abstractions/openssl create mode 100644 apparmor.d/abstractions/orbit2 create mode 100644 apparmor.d/abstractions/p11-kit create mode 100644 apparmor.d/abstractions/perl create mode 100644 apparmor.d/abstractions/php create mode 100644 apparmor.d/abstractions/php5 create mode 100644 apparmor.d/abstractions/postfix-common create mode 100644 apparmor.d/abstractions/private-files create mode 100644 apparmor.d/abstractions/private-files-strict create mode 100644 apparmor.d/abstractions/python create mode 100644 apparmor.d/abstractions/ruby create mode 100644 apparmor.d/abstractions/samba create mode 100644 apparmor.d/abstractions/smbpass create mode 100644 apparmor.d/abstractions/ssl_certs create mode 100644 apparmor.d/abstractions/ssl_keys create mode 100644 apparmor.d/abstractions/svn-repositories create mode 100644 apparmor.d/abstractions/ubuntu-bittorrent-clients create mode 100644 apparmor.d/abstractions/ubuntu-browsers create mode 100644 apparmor.d/abstractions/ubuntu-browsers.d/java create mode 100644 apparmor.d/abstractions/ubuntu-browsers.d/kde create mode 100644 apparmor.d/abstractions/ubuntu-browsers.d/mailto create mode 100644 apparmor.d/abstractions/ubuntu-browsers.d/multimedia create mode 100644 apparmor.d/abstractions/ubuntu-browsers.d/plugins-common create mode 100644 apparmor.d/abstractions/ubuntu-browsers.d/productivity create mode 100644 apparmor.d/abstractions/ubuntu-browsers.d/text-editors create mode 100644 apparmor.d/abstractions/ubuntu-browsers.d/ubuntu-integration create mode 100644 apparmor.d/abstractions/ubuntu-browsers.d/ubuntu-integration-xul create mode 100644 apparmor.d/abstractions/ubuntu-browsers.d/user-files create mode 100644 apparmor.d/abstractions/ubuntu-console-browsers create mode 100644 apparmor.d/abstractions/ubuntu-console-email create mode 100644 apparmor.d/abstractions/ubuntu-email create mode 100644 apparmor.d/abstractions/ubuntu-feed-readers create mode 100644 apparmor.d/abstractions/ubuntu-gnome-terminal create mode 100644 apparmor.d/abstractions/ubuntu-helpers create mode 100644 apparmor.d/abstractions/ubuntu-konsole create mode 100644 apparmor.d/abstractions/ubuntu-media-players create mode 100644 apparmor.d/abstractions/ubuntu-unity7-base create mode 100644 apparmor.d/abstractions/ubuntu-unity7-launcher create mode 100644 apparmor.d/abstractions/ubuntu-unity7-messaging create mode 100644 apparmor.d/abstractions/ubuntu-xterm create mode 100644 apparmor.d/abstractions/user-download create mode 100644 apparmor.d/abstractions/user-mail create mode 100644 apparmor.d/abstractions/user-manpages create mode 100644 apparmor.d/abstractions/user-tmp create mode 100644 apparmor.d/abstractions/user-write create mode 100644 apparmor.d/abstractions/video create mode 100644 apparmor.d/abstractions/wayland create mode 100644 apparmor.d/abstractions/web-data create mode 100644 apparmor.d/abstractions/winbind create mode 100644 apparmor.d/abstractions/wutmp create mode 100644 apparmor.d/abstractions/xad create mode 100644 apparmor.d/abstractions/xdg-desktop create mode 120000 apparmor.d/disable/usr.sbin.rsyslogd create mode 100644 apparmor.d/local/README create mode 100644 apparmor.d/local/sbin.dhclient create mode 100644 apparmor.d/local/usr.bin.man create mode 100644 apparmor.d/local/usr.sbin.mysqld create mode 100644 apparmor.d/local/usr.sbin.named create mode 100644 apparmor.d/local/usr.sbin.rsyslogd create mode 100644 apparmor.d/local/usr.sbin.tcpdump create mode 100644 apparmor.d/sbin.dhclient create mode 100644 apparmor.d/tunables/alias create mode 100644 apparmor.d/tunables/apparmorfs create mode 100644 apparmor.d/tunables/dovecot create mode 100644 apparmor.d/tunables/global create mode 100644 apparmor.d/tunables/home create mode 100644 apparmor.d/tunables/home.d/site.local create mode 100644 apparmor.d/tunables/home.d/ubuntu create mode 100644 apparmor.d/tunables/kernelvars create mode 100644 apparmor.d/tunables/multiarch create mode 100644 apparmor.d/tunables/multiarch.d/site.local create mode 100644 apparmor.d/tunables/proc create mode 100644 apparmor.d/tunables/securityfs create mode 100644 apparmor.d/tunables/sys create mode 100644 apparmor.d/tunables/xdg-user-dirs create mode 100644 apparmor.d/tunables/xdg-user-dirs.d/site.local create mode 100644 apparmor.d/usr.bin.man create mode 100644 apparmor.d/usr.sbin.mysqld create mode 100644 apparmor.d/usr.sbin.named create mode 100644 apparmor.d/usr.sbin.rsyslogd create mode 100644 apparmor.d/usr.sbin.tcpdump create mode 120000 apparmor/init/network-interface-security/sbin.dhclient create mode 100644 apparmor/parser.conf create mode 100644 apparmor/subdomain.conf create mode 100644 apt/apt.conf.d/00trustcdrom create mode 100644 apt/apt.conf.d/01-vendor-ubuntu create mode 100644 apt/apt.conf.d/01autoremove create mode 100644 apt/apt.conf.d/01autoremove-kernels create mode 100644 apt/apt.conf.d/05etckeeper create mode 100644 apt/apt.conf.d/20apt-show-versions create mode 100644 apt/apt.conf.d/50command-not-found create mode 100644 apt/apt.conf.d/70debconf create mode 100644 apt/sources.list create mode 100644 apt/sources.list.d/webmin.list create mode 100644 apt/trusted.gpg create mode 100644 apt/trusted.gpg.d/ubuntu-keyring-2012-archive.gpg create mode 100644 apt/trusted.gpg.d/ubuntu-keyring-2012-cdimage.gpg create mode 100644 apt/trusted.gpg.d/ubuntu-keyring-2018-archive.gpg create mode 100644 bash.bashrc create mode 100644 bash_completion create mode 100644 bash_completion.d/git-prompt create mode 100644 bash_completion.d/grub create mode 100644 bind/bind.keys create mode 100644 bind/db.0 create mode 100644 bind/db.127 create mode 100644 bind/db.255 create mode 100644 bind/db.empty create mode 100644 bind/db.local create mode 100644 bind/named.conf create mode 100644 bind/named.conf.default-zones create mode 100644 bind/named.conf.local create mode 100644 bind/named.conf.options create mode 100644 bind/rndc.key create mode 100644 bind/zones.rfc1918 create mode 100644 bindresvport.blacklist create mode 100644 ca-certificates.conf create mode 100644 calendar/default create mode 100644 console-setup/ISO-8859-1.acm create mode 100644 console-setup/Uni2-Fixed16.psf.gz create mode 100644 console-setup/cached_ISO-8859-1.acm.gz create mode 100644 console-setup/cached_ISO-8859-1_del.kmap.gz create mode 100644 console-setup/cached_UTF-8_del.kmap.gz create mode 100644 console-setup/cached_Uni2-Fixed16.psf.gz create mode 100755 console-setup/cached_setup_font.sh create mode 100755 console-setup/cached_setup_keyboard.sh create mode 100755 console-setup/cached_setup_terminal.sh create mode 100644 console-setup/compose.ARMSCII-8.inc create mode 100644 console-setup/compose.CP1251.inc create mode 100644 console-setup/compose.CP1255.inc create mode 100644 console-setup/compose.CP1256.inc create mode 100644 console-setup/compose.GEORGIAN-ACADEMY.inc create mode 100644 console-setup/compose.GEORGIAN-PS.inc create mode 100644 console-setup/compose.IBM1133.inc create mode 100644 console-setup/compose.ISIRI-3342.inc create mode 100644 console-setup/compose.ISO-8859-1.inc create mode 100644 console-setup/compose.ISO-8859-10.inc create mode 100644 console-setup/compose.ISO-8859-11.inc create mode 100644 console-setup/compose.ISO-8859-13.inc create mode 100644 console-setup/compose.ISO-8859-14.inc create mode 100644 console-setup/compose.ISO-8859-15.inc create mode 100644 console-setup/compose.ISO-8859-16.inc create mode 100644 console-setup/compose.ISO-8859-2.inc create mode 100644 console-setup/compose.ISO-8859-3.inc create mode 100644 console-setup/compose.ISO-8859-4.inc create mode 100644 console-setup/compose.ISO-8859-5.inc create mode 100644 console-setup/compose.ISO-8859-6.inc create mode 100644 console-setup/compose.ISO-8859-7.inc create mode 100644 console-setup/compose.ISO-8859-8.inc create mode 100644 console-setup/compose.ISO-8859-9.inc create mode 100644 console-setup/compose.KOI8-R.inc create mode 100644 console-setup/compose.KOI8-U.inc create mode 100644 console-setup/compose.TIS-620.inc create mode 100644 console-setup/compose.VISCII.inc create mode 100644 console-setup/remap.inc create mode 100644 console-setup/vtrgb create mode 100644 console-setup/vtrgb.vga create mode 100644 cron.d/.placeholder create mode 100644 cron.d/php create mode 100644 cron.d/popularity-contest create mode 100644 cron.d/sync create mode 100644 cron.d/sysctl create mode 100644 cron.daily/.placeholder create mode 100755 cron.daily/apache2 create mode 100755 cron.daily/apt-compat create mode 100755 cron.daily/apt-show-versions create mode 100755 cron.daily/bsdmainutils create mode 100755 cron.daily/dpkg create mode 100755 cron.daily/etckeeper create mode 100755 cron.daily/logrotate create mode 100755 cron.daily/man-db create mode 100755 cron.daily/mlocate create mode 100755 cron.daily/passwd create mode 100755 cron.daily/popularity-contest create mode 100755 cron.daily/ubuntu-advantage-tools create mode 100644 cron.hourly/.placeholder create mode 100644 cron.monthly/.placeholder create mode 100644 cron.weekly/.placeholder create mode 100755 cron.weekly/man-db create mode 100644 crontab create mode 100644 cruft/filters-unex/etckeeper create mode 100644 dbconfig-common/config create mode 100644 dbconfig-common/phpmyadmin.conf create mode 100644 dbus-1/system.d/com.ubuntu.LanguageSelector.conf create mode 100644 dbus-1/system.d/org.freedesktop.Accounts.conf create mode 100644 debconf.conf create mode 100644 debian_version create mode 100644 default/acpid create mode 100644 default/amd64-microcode create mode 100644 default/apache-htcacheclean create mode 100644 default/bind9 create mode 100644 default/bsdmainutils create mode 100644 default/console-setup create mode 100644 default/crda create mode 100644 default/cron create mode 100644 default/dbus create mode 100644 default/grub create mode 100644 default/intel-microcode create mode 100644 default/irqbalance create mode 100644 default/keyboard create mode 100644 default/locale create mode 100644 default/motd-news create mode 100644 default/networkd-dispatcher create mode 100644 default/nss create mode 100644 default/rsync create mode 100644 default/rsyslog create mode 100644 default/ssh create mode 100644 default/ufw create mode 100644 default/useradd create mode 100644 deluser.conf create mode 100644 depmod.d/ubuntu.conf create mode 100644 dhcp/debug create mode 120000 dhcp/dhclient-enter-hooks.d/debug create mode 100755 dhcp/dhclient-enter-hooks.d/resolved create mode 120000 dhcp/dhclient-exit-hooks.d/debug create mode 100644 dhcp/dhclient-exit-hooks.d/rfc3442-classless-routes create mode 100644 dhcp/dhclient-exit-hooks.d/timesyncd create mode 100644 dhcp/dhclient.conf create mode 100644 dictionaries-common/ispell-default create mode 120000 dictionaries-common/words create mode 100644 dpkg/dpkg.cfg create mode 100644 dpkg/origins/debian create mode 120000 dpkg/origins/default create mode 100644 dpkg/origins/ubuntu create mode 100644 emacs/site-start.d/50dictionaries-common.el create mode 100644 environment create mode 100755 etckeeper/commit.d/10vcs-test create mode 120000 etckeeper/commit.d/20store-metadata create mode 100755 etckeeper/commit.d/30bzr-add create mode 100755 etckeeper/commit.d/30darcs-add create mode 100755 etckeeper/commit.d/30git-add create mode 100755 etckeeper/commit.d/30hg-addremove create mode 100755 etckeeper/commit.d/50vcs-commit create mode 100755 etckeeper/commit.d/99push create mode 100644 etckeeper/commit.d/README create mode 100755 etckeeper/daily create mode 100644 etckeeper/etckeeper.conf create mode 100755 etckeeper/init.d/10restore-metadata create mode 100755 etckeeper/init.d/20restore-etckeeper create mode 100755 etckeeper/init.d/40vcs-init create mode 100755 etckeeper/init.d/50vcs-ignore create mode 100755 etckeeper/init.d/50vcs-perm create mode 100755 etckeeper/init.d/50vcs-pre-commit-hook create mode 100755 etckeeper/init.d/60darcs-deleted-symlinks create mode 100755 etckeeper/init.d/70vcs-add create mode 100644 etckeeper/init.d/README create mode 100755 etckeeper/list-installed.d/50list-installed create mode 100755 etckeeper/post-install.d/50vcs-commit create mode 100644 etckeeper/post-install.d/README create mode 100755 etckeeper/pre-commit.d/20warn-problem-files create mode 100755 etckeeper/pre-commit.d/30store-metadata create mode 100644 etckeeper/pre-commit.d/README create mode 100755 etckeeper/pre-install.d/10packagelist create mode 100755 etckeeper/pre-install.d/50uncommitted-changes create mode 100644 etckeeper/pre-install.d/README create mode 100755 etckeeper/unclean.d/50test create mode 100644 etckeeper/unclean.d/README create mode 100755 etckeeper/uninit.d/01prompt create mode 100755 etckeeper/uninit.d/50remove-metadata create mode 100755 etckeeper/uninit.d/50vcs-uninit create mode 100644 etckeeper/uninit.d/README create mode 100755 etckeeper/update-ignore.d/01update-ignore create mode 100644 etckeeper/update-ignore.d/README create mode 100755 etckeeper/vcs.d/50vcs-cmd create mode 100644 fonts/conf.avail/10-antialias.conf create mode 100644 fonts/conf.avail/10-autohint.conf create mode 100644 fonts/conf.avail/10-hinting-full.conf create mode 100644 fonts/conf.avail/10-hinting-medium.conf create mode 100644 fonts/conf.avail/10-hinting-none.conf create mode 100644 fonts/conf.avail/10-hinting-slight.conf create mode 100644 fonts/conf.avail/10-no-sub-pixel.conf create mode 100644 fonts/conf.avail/10-scale-bitmap-fonts.conf create mode 100644 fonts/conf.avail/10-sub-pixel-bgr.conf create mode 100644 fonts/conf.avail/10-sub-pixel-rgb.conf create mode 100644 fonts/conf.avail/10-sub-pixel-vbgr.conf create mode 100644 fonts/conf.avail/10-sub-pixel-vrgb.conf create mode 100644 fonts/conf.avail/10-unhinted.conf create mode 100644 fonts/conf.avail/11-lcdfilter-default.conf create mode 100644 fonts/conf.avail/11-lcdfilter-legacy.conf create mode 100644 fonts/conf.avail/11-lcdfilter-light.conf create mode 100644 fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf create mode 100644 fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf create mode 100644 fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf create mode 100644 fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf create mode 100644 fonts/conf.avail/20-unhint-small-dejavu-sans.conf create mode 100644 fonts/conf.avail/20-unhint-small-dejavu-serif.conf create mode 100644 fonts/conf.avail/20-unhint-small-vera.conf create mode 100644 fonts/conf.avail/25-unhint-nonlatin.conf create mode 100644 fonts/conf.avail/30-cjk-aliases.conf create mode 100644 fonts/conf.avail/30-metric-aliases.conf create mode 100644 fonts/conf.avail/40-nonlatin.conf create mode 100644 fonts/conf.avail/45-generic.conf create mode 100644 fonts/conf.avail/45-latin.conf create mode 100644 fonts/conf.avail/49-sansserif.conf create mode 100644 fonts/conf.avail/50-user.conf create mode 100644 fonts/conf.avail/51-local.conf create mode 100644 fonts/conf.avail/53-monospace-lcd-filter.conf create mode 100644 fonts/conf.avail/57-dejavu-sans-mono.conf create mode 100644 fonts/conf.avail/57-dejavu-sans.conf create mode 100644 fonts/conf.avail/57-dejavu-serif.conf create mode 100644 fonts/conf.avail/58-dejavu-lgc-sans-mono.conf create mode 100644 fonts/conf.avail/58-dejavu-lgc-sans.conf create mode 100644 fonts/conf.avail/58-dejavu-lgc-serif.conf create mode 100644 fonts/conf.avail/60-generic.conf create mode 100644 fonts/conf.avail/60-latin.conf create mode 100644 fonts/conf.avail/64-language-selector-prefer.conf create mode 100644 fonts/conf.avail/65-fonts-persian.conf create mode 100644 fonts/conf.avail/65-khmer.conf create mode 100644 fonts/conf.avail/65-nonlatin.conf create mode 100644 fonts/conf.avail/69-language-selector-ja.conf create mode 100644 fonts/conf.avail/69-language-selector-zh-cn.conf create mode 100644 fonts/conf.avail/69-language-selector-zh-hk.conf create mode 100644 fonts/conf.avail/69-language-selector-zh-mo.conf create mode 100644 fonts/conf.avail/69-language-selector-zh-sg.conf create mode 100644 fonts/conf.avail/69-language-selector-zh-tw.conf create mode 100644 fonts/conf.avail/69-unifont.conf create mode 100644 fonts/conf.avail/70-force-bitmaps.conf create mode 100644 fonts/conf.avail/70-no-bitmaps.conf create mode 100644 fonts/conf.avail/70-yes-bitmaps.conf create mode 100644 fonts/conf.avail/80-delicious.conf create mode 100644 fonts/conf.avail/90-synthetic.conf create mode 100644 fonts/conf.avail/99-language-selector-zh.conf create mode 120000 fonts/conf.d/10-antialias.conf create mode 120000 fonts/conf.d/10-hinting-slight.conf create mode 120000 fonts/conf.d/10-scale-bitmap-fonts.conf create mode 120000 fonts/conf.d/11-lcdfilter-default.conf create mode 120000 fonts/conf.d/20-unhint-small-dejavu-lgc-sans-mono.conf create mode 120000 fonts/conf.d/20-unhint-small-dejavu-lgc-sans.conf create mode 120000 fonts/conf.d/20-unhint-small-dejavu-lgc-serif.conf create mode 120000 fonts/conf.d/20-unhint-small-dejavu-sans-mono.conf create mode 120000 fonts/conf.d/20-unhint-small-dejavu-sans.conf create mode 120000 fonts/conf.d/20-unhint-small-dejavu-serif.conf create mode 120000 fonts/conf.d/20-unhint-small-vera.conf create mode 120000 fonts/conf.d/30-cjk-aliases.conf create mode 120000 fonts/conf.d/30-metric-aliases.conf create mode 120000 fonts/conf.d/40-nonlatin.conf create mode 120000 fonts/conf.d/45-generic.conf create mode 120000 fonts/conf.d/45-latin.conf create mode 120000 fonts/conf.d/49-sansserif.conf create mode 120000 fonts/conf.d/50-user.conf create mode 120000 fonts/conf.d/51-local.conf create mode 120000 fonts/conf.d/57-dejavu-sans-mono.conf create mode 120000 fonts/conf.d/57-dejavu-sans.conf create mode 120000 fonts/conf.d/57-dejavu-serif.conf create mode 120000 fonts/conf.d/58-dejavu-lgc-sans-mono.conf create mode 120000 fonts/conf.d/58-dejavu-lgc-sans.conf create mode 120000 fonts/conf.d/58-dejavu-lgc-serif.conf create mode 120000 fonts/conf.d/60-generic.conf create mode 120000 fonts/conf.d/60-latin.conf create mode 120000 fonts/conf.d/64-language-selector-prefer.conf create mode 120000 fonts/conf.d/65-fonts-persian.conf create mode 120000 fonts/conf.d/65-nonlatin.conf create mode 120000 fonts/conf.d/69-language-selector-ja.conf create mode 120000 fonts/conf.d/69-language-selector-zh-cn.conf create mode 120000 fonts/conf.d/69-language-selector-zh-hk.conf create mode 120000 fonts/conf.d/69-language-selector-zh-mo.conf create mode 120000 fonts/conf.d/69-language-selector-zh-sg.conf create mode 120000 fonts/conf.d/69-language-selector-zh-tw.conf create mode 120000 fonts/conf.d/69-unifont.conf create mode 120000 fonts/conf.d/70-no-bitmaps.conf create mode 120000 fonts/conf.d/80-delicious.conf create mode 120000 fonts/conf.d/90-synthetic.conf create mode 120000 fonts/conf.d/99-language-selector-zh.conf create mode 100644 fonts/conf.d/README create mode 100644 fonts/fonts.conf create mode 100644 fstab create mode 100644 fuse.conf create mode 100644 gai.conf create mode 100644 groff/man.local create mode 100644 groff/mdoc.local create mode 100644 group create mode 100644 group- create mode 100755 grub.d/00_header create mode 100755 grub.d/05_debian_theme create mode 100755 grub.d/10_linux create mode 100755 grub.d/20_linux_xen create mode 100755 grub.d/30_os-prober create mode 100755 grub.d/30_uefi-firmware create mode 100755 grub.d/40_custom create mode 100755 grub.d/41_custom create mode 100644 grub.d/README create mode 100644 gshadow create mode 100644 gshadow- create mode 100644 hdparm.conf create mode 100644 host.conf create mode 100644 hostname create mode 100644 hosts create mode 100644 hosts.allow create mode 100644 hosts.deny create mode 100755 init.d/acpid create mode 100755 init.d/apache-htcacheclean create mode 100755 init.d/apache2 create mode 100755 init.d/apparmor create mode 100755 init.d/bind9 create mode 100755 init.d/console-setup.sh create mode 100755 init.d/cron create mode 100755 init.d/dbus create mode 100755 init.d/grub-common create mode 100755 init.d/hwclock.sh create mode 100755 init.d/irqbalance create mode 100755 init.d/keyboard-setup.sh create mode 100755 init.d/kmod create mode 100755 init.d/mysql create mode 100755 init.d/plymouth create mode 100755 init.d/plymouth-log create mode 100755 init.d/postfix create mode 100755 init.d/procps create mode 100755 init.d/rsync create mode 100755 init.d/rsyslog create mode 100755 init.d/ssh create mode 100755 init.d/udev create mode 100755 init.d/ufw create mode 100755 init.d/uuidd create mode 100755 init.d/webmin create mode 100644 init/mysql.conf create mode 100644 initramfs-tools/initramfs.conf create mode 100644 initramfs-tools/modules create mode 100644 initramfs-tools/update-initramfs.conf create mode 100644 inputrc create mode 100644 insserv.conf.d/bind9 create mode 100644 insserv.conf.d/postfix create mode 100644 iproute2/bpf_pinning create mode 100644 iproute2/ematch_map create mode 100644 iproute2/group create mode 100644 iproute2/nl_protos create mode 100644 iproute2/rt_dsfield create mode 100644 iproute2/rt_protos create mode 100644 iproute2/rt_protos.d/README create mode 100644 iproute2/rt_realms create mode 100644 iproute2/rt_scopes create mode 100644 iproute2/rt_tables create mode 100644 iproute2/rt_tables.d/README create mode 100644 issue create mode 100644 issue.net create mode 100644 kernel-img.conf create mode 100755 kernel/postinst.d/apt-auto-removal create mode 100755 kernel/postinst.d/initramfs-tools create mode 100755 kernel/postinst.d/zz-update-grub create mode 100755 kernel/postrm.d/initramfs-tools create mode 100755 kernel/postrm.d/zz-update-grub create mode 100755 kernel/preinst.d/intel-microcode create mode 100644 ld.so.conf create mode 100644 ld.so.conf.d/libc.conf create mode 100644 ld.so.conf.d/x86_64-linux-gnu.conf create mode 100644 ldap/ldap.conf create mode 100644 legal create mode 100644 libaudit.conf create mode 100644 libnl-3/classid create mode 100644 libnl-3/pktloc create mode 100644 lighttpd/conf-available/90-javascript-alias.conf create mode 120000 lighttpd/conf-enabled/90-javascript-alias.conf create mode 100644 locale.alias create mode 100644 locale.gen create mode 120000 localtime create mode 100644 logcheck/ignore.d.paranoid/mysql-server-5_7 create mode 100644 logcheck/ignore.d.server/gpg-agent create mode 100644 logcheck/ignore.d.server/libsasl2-modules create mode 100644 logcheck/ignore.d.server/mysql-server-5_7 create mode 100644 logcheck/ignore.d.server/rsyslog create mode 100644 logcheck/ignore.d.workstation/mysql-server-5_7 create mode 100644 login.defs create mode 100644 logrotate.conf create mode 100644 logrotate.d/alternatives create mode 100644 logrotate.d/apache2 create mode 100644 logrotate.d/apt create mode 100644 logrotate.d/btmp create mode 100644 logrotate.d/dbconfig-common create mode 100644 logrotate.d/dpkg create mode 100644 logrotate.d/mysql-server create mode 100644 logrotate.d/rsyslog create mode 100644 logrotate.d/ufw create mode 100644 logrotate.d/wtmp create mode 100644 lsb-release create mode 100644 ltrace.conf create mode 100644 machine-id create mode 100644 magic create mode 100644 magic.mime create mode 100644 mailcap create mode 100644 mailcap.order create mode 100644 mailname create mode 100644 manpath.config create mode 100644 mime.types create mode 100644 mke2fs.conf create mode 100644 modprobe.d/amd64-microcode-blacklist.conf create mode 100644 modprobe.d/blacklist-ath_pci.conf create mode 100644 modprobe.d/blacklist-firewire.conf create mode 100644 modprobe.d/blacklist-framebuffer.conf create mode 100644 modprobe.d/blacklist-rare-network.conf create mode 100644 modprobe.d/blacklist.conf create mode 100644 modprobe.d/intel-microcode-blacklist.conf create mode 100644 modprobe.d/iwlwifi.conf create mode 100644 modules create mode 120000 modules-load.d/modules.conf create mode 100644 mysql/conf.d/mysql.cnf create mode 100644 mysql/conf.d/mysqldump.cnf create mode 100755 mysql/debian-start create mode 100644 mysql/debian.cnf create mode 120000 mysql/my.cnf create mode 100644 mysql/my.cnf.fallback create mode 100644 mysql/mysql.cnf create mode 100644 mysql/mysql.conf.d/mysqld.cnf create mode 100644 mysql/mysql.conf.d/mysqld_safe_syslog.cnf create mode 100644 nanorc create mode 100644 netplan/01-netcfg.yaml create mode 100755 network/if-down.d/bind9 create mode 100755 network/if-down.d/postfix create mode 100755 network/if-up.d/bind9 create mode 100755 network/if-up.d/openssh-server create mode 100755 network/if-up.d/postfix create mode 100644 network/interfaces create mode 100644 networks create mode 120000 newt/palette create mode 100644 newt/palette.original create mode 100644 newt/palette.ubuntu create mode 100644 nsswitch.conf create mode 120000 os-release create mode 100644 pam.conf create mode 100644 pam.d/chfn create mode 100644 pam.d/chpasswd create mode 100644 pam.d/chsh create mode 100644 pam.d/common-account create mode 100644 pam.d/common-auth create mode 100644 pam.d/common-password create mode 100644 pam.d/common-session create mode 100644 pam.d/common-session-noninteractive create mode 100644 pam.d/cron create mode 100644 pam.d/login create mode 100644 pam.d/newusers create mode 100644 pam.d/other create mode 100644 pam.d/passwd create mode 100644 pam.d/runuser create mode 100644 pam.d/runuser-l create mode 100644 pam.d/sshd create mode 100644 pam.d/su create mode 100644 pam.d/sudo create mode 100644 pam.d/systemd-user create mode 100644 pam.d/webmin create mode 100644 passwd create mode 100644 passwd- create mode 100644 perl/Net/libnet.cfg create mode 120000 php/7.2/apache2/conf.d/10-mysqlnd.ini create mode 120000 php/7.2/apache2/conf.d/10-opcache.ini create mode 120000 php/7.2/apache2/conf.d/10-pdo.ini create mode 120000 php/7.2/apache2/conf.d/15-xml.ini create mode 120000 php/7.2/apache2/conf.d/20-bz2.ini create mode 120000 php/7.2/apache2/conf.d/20-calendar.ini create mode 120000 php/7.2/apache2/conf.d/20-ctype.ini create mode 120000 php/7.2/apache2/conf.d/20-curl.ini create mode 120000 php/7.2/apache2/conf.d/20-dom.ini create mode 120000 php/7.2/apache2/conf.d/20-exif.ini create mode 120000 php/7.2/apache2/conf.d/20-fileinfo.ini create mode 120000 php/7.2/apache2/conf.d/20-ftp.ini create mode 120000 php/7.2/apache2/conf.d/20-gd.ini create mode 120000 php/7.2/apache2/conf.d/20-gettext.ini create mode 120000 php/7.2/apache2/conf.d/20-iconv.ini create mode 120000 php/7.2/apache2/conf.d/20-json.ini create mode 120000 php/7.2/apache2/conf.d/20-mbstring.ini create mode 120000 php/7.2/apache2/conf.d/20-mysqli.ini create mode 120000 php/7.2/apache2/conf.d/20-pdo_mysql.ini create mode 120000 php/7.2/apache2/conf.d/20-phar.ini create mode 120000 php/7.2/apache2/conf.d/20-posix.ini create mode 120000 php/7.2/apache2/conf.d/20-readline.ini create mode 120000 php/7.2/apache2/conf.d/20-shmop.ini create mode 120000 php/7.2/apache2/conf.d/20-simplexml.ini create mode 120000 php/7.2/apache2/conf.d/20-sockets.ini create mode 120000 php/7.2/apache2/conf.d/20-sysvmsg.ini create mode 120000 php/7.2/apache2/conf.d/20-sysvsem.ini create mode 120000 php/7.2/apache2/conf.d/20-sysvshm.ini create mode 120000 php/7.2/apache2/conf.d/20-tokenizer.ini create mode 120000 php/7.2/apache2/conf.d/20-wddx.ini create mode 120000 php/7.2/apache2/conf.d/20-xmlreader.ini create mode 120000 php/7.2/apache2/conf.d/20-xmlwriter.ini create mode 120000 php/7.2/apache2/conf.d/20-xsl.ini create mode 120000 php/7.2/apache2/conf.d/20-zip.ini create mode 100644 php/7.2/apache2/php.ini create mode 120000 php/7.2/cli/conf.d/10-mysqlnd.ini create mode 120000 php/7.2/cli/conf.d/10-opcache.ini create mode 120000 php/7.2/cli/conf.d/10-pdo.ini create mode 120000 php/7.2/cli/conf.d/15-xml.ini create mode 120000 php/7.2/cli/conf.d/20-bz2.ini create mode 120000 php/7.2/cli/conf.d/20-calendar.ini create mode 120000 php/7.2/cli/conf.d/20-ctype.ini create mode 120000 php/7.2/cli/conf.d/20-curl.ini create mode 120000 php/7.2/cli/conf.d/20-dom.ini create mode 120000 php/7.2/cli/conf.d/20-exif.ini create mode 120000 php/7.2/cli/conf.d/20-fileinfo.ini create mode 120000 php/7.2/cli/conf.d/20-ftp.ini create mode 120000 php/7.2/cli/conf.d/20-gd.ini create mode 120000 php/7.2/cli/conf.d/20-gettext.ini create mode 120000 php/7.2/cli/conf.d/20-iconv.ini create mode 120000 php/7.2/cli/conf.d/20-json.ini create mode 120000 php/7.2/cli/conf.d/20-mbstring.ini create mode 120000 php/7.2/cli/conf.d/20-mysqli.ini create mode 120000 php/7.2/cli/conf.d/20-pdo_mysql.ini create mode 120000 php/7.2/cli/conf.d/20-phar.ini create mode 120000 php/7.2/cli/conf.d/20-posix.ini create mode 120000 php/7.2/cli/conf.d/20-readline.ini create mode 120000 php/7.2/cli/conf.d/20-shmop.ini create mode 120000 php/7.2/cli/conf.d/20-simplexml.ini create mode 120000 php/7.2/cli/conf.d/20-sockets.ini create mode 120000 php/7.2/cli/conf.d/20-sysvmsg.ini create mode 120000 php/7.2/cli/conf.d/20-sysvsem.ini create mode 120000 php/7.2/cli/conf.d/20-sysvshm.ini create mode 120000 php/7.2/cli/conf.d/20-tokenizer.ini create mode 120000 php/7.2/cli/conf.d/20-wddx.ini create mode 120000 php/7.2/cli/conf.d/20-xmlreader.ini create mode 120000 php/7.2/cli/conf.d/20-xmlwriter.ini create mode 120000 php/7.2/cli/conf.d/20-xsl.ini create mode 120000 php/7.2/cli/conf.d/20-zip.ini create mode 100644 php/7.2/cli/php.ini create mode 100644 php/7.2/mods-available/bz2.ini create mode 100644 php/7.2/mods-available/calendar.ini create mode 100644 php/7.2/mods-available/ctype.ini create mode 100644 php/7.2/mods-available/curl.ini create mode 100644 php/7.2/mods-available/dom.ini create mode 100644 php/7.2/mods-available/exif.ini create mode 100644 php/7.2/mods-available/fileinfo.ini create mode 100644 php/7.2/mods-available/ftp.ini create mode 100644 php/7.2/mods-available/gd.ini create mode 100644 php/7.2/mods-available/gettext.ini create mode 100644 php/7.2/mods-available/iconv.ini create mode 100644 php/7.2/mods-available/json.ini create mode 100644 php/7.2/mods-available/mbstring.ini create mode 100644 php/7.2/mods-available/mysqli.ini create mode 100644 php/7.2/mods-available/mysqlnd.ini create mode 100644 php/7.2/mods-available/opcache.ini create mode 100644 php/7.2/mods-available/pdo.ini create mode 100644 php/7.2/mods-available/pdo_mysql.ini create mode 100644 php/7.2/mods-available/phar.ini create mode 100644 php/7.2/mods-available/posix.ini create mode 100644 php/7.2/mods-available/readline.ini create mode 100644 php/7.2/mods-available/shmop.ini create mode 100644 php/7.2/mods-available/simplexml.ini create mode 100644 php/7.2/mods-available/sockets.ini create mode 100644 php/7.2/mods-available/sysvmsg.ini create mode 100644 php/7.2/mods-available/sysvsem.ini create mode 100644 php/7.2/mods-available/sysvshm.ini create mode 100644 php/7.2/mods-available/tokenizer.ini create mode 100644 php/7.2/mods-available/wddx.ini create mode 100644 php/7.2/mods-available/xml.ini create mode 100644 php/7.2/mods-available/xmlreader.ini create mode 100644 php/7.2/mods-available/xmlwriter.ini create mode 100644 php/7.2/mods-available/xsl.ini create mode 100644 php/7.2/mods-available/zip.ini create mode 100644 phpmyadmin/apache.conf create mode 100644 phpmyadmin/config-db.php create mode 100644 phpmyadmin/config.footer.inc.php create mode 100644 phpmyadmin/config.header.inc.php create mode 100644 phpmyadmin/config.inc.php create mode 100644 phpmyadmin/htpasswd.setup create mode 100644 phpmyadmin/lighttpd.conf create mode 100644 phpmyadmin/phpmyadmin.desktop create mode 100644 phpmyadmin/phpmyadmin.service create mode 100755 pm/sleep.d/10_grub-common create mode 100644 popularity-contest.conf create mode 100644 postfix/dynamicmaps.cf create mode 100644 postfix/main.cf create mode 100644 postfix/main.cf.proto create mode 100644 postfix/makedefs.out create mode 100644 postfix/master.cf create mode 100644 postfix/master.cf.proto create mode 100755 postfix/post-install create mode 100644 postfix/postfix-files create mode 100755 postfix/postfix-script create mode 100755 ppp/ip-down.d/bind9 create mode 100755 ppp/ip-down.d/postfix create mode 100755 ppp/ip-up.d/bind9 create mode 100755 ppp/ip-up.d/postfix create mode 100644 profile create mode 100644 profile.d/01-locale-fix.sh create mode 100644 profile.d/bash_completion.sh create mode 100644 profile.d/cedilla-portuguese.sh create mode 100644 protocols create mode 100644 python/debian_config create mode 100644 python2.7/sitecustomize.py create mode 100644 python3.6/sitecustomize.py create mode 100644 python3/debian_config create mode 120000 rc0.d/K01apache-htcacheclean create mode 120000 rc0.d/K01apache2 create mode 120000 rc0.d/K01bind9 create mode 120000 rc0.d/K01irqbalance create mode 120000 rc0.d/K01mysql create mode 120000 rc0.d/K01plymouth create mode 120000 rc0.d/K01postfix create mode 120000 rc0.d/K01rsyslog create mode 120000 rc0.d/K01uuidd create mode 120000 rc0.d/K10webmin create mode 120000 rc1.d/K01apache-htcacheclean create mode 120000 rc1.d/K01apache2 create mode 120000 rc1.d/K01bind9 create mode 120000 rc1.d/K01irqbalance create mode 120000 rc1.d/K01mysql create mode 120000 rc1.d/K01postfix create mode 120000 rc1.d/K01rsyslog create mode 120000 rc1.d/K01ufw create mode 120000 rc1.d/K01uuidd create mode 120000 rc1.d/K10webmin create mode 120000 rc2.d/K01apache-htcacheclean create mode 120000 rc2.d/S01acpid create mode 120000 rc2.d/S01apache2 create mode 120000 rc2.d/S01bind9 create mode 120000 rc2.d/S01console-setup.sh create mode 120000 rc2.d/S01cron create mode 120000 rc2.d/S01dbus create mode 120000 rc2.d/S01grub-common create mode 120000 rc2.d/S01irqbalance create mode 120000 rc2.d/S01mysql create mode 120000 rc2.d/S01plymouth create mode 120000 rc2.d/S01postfix create mode 120000 rc2.d/S01rsync create mode 120000 rc2.d/S01rsyslog create mode 120000 rc2.d/S01ssh create mode 120000 rc2.d/S01uuidd create mode 120000 rc2.d/S99webmin create mode 120000 rc3.d/K01apache-htcacheclean create mode 120000 rc3.d/S01acpid create mode 120000 rc3.d/S01apache2 create mode 120000 rc3.d/S01bind9 create mode 120000 rc3.d/S01console-setup.sh create mode 120000 rc3.d/S01cron create mode 120000 rc3.d/S01dbus create mode 120000 rc3.d/S01grub-common create mode 120000 rc3.d/S01irqbalance create mode 120000 rc3.d/S01mysql create mode 120000 rc3.d/S01plymouth create mode 120000 rc3.d/S01postfix create mode 120000 rc3.d/S01rsync create mode 120000 rc3.d/S01rsyslog create mode 120000 rc3.d/S01ssh create mode 120000 rc3.d/S01uuidd create mode 120000 rc3.d/S99webmin create mode 120000 rc4.d/K01apache-htcacheclean create mode 120000 rc4.d/K10webmin create mode 120000 rc4.d/S01acpid create mode 120000 rc4.d/S01apache2 create mode 120000 rc4.d/S01bind9 create mode 120000 rc4.d/S01console-setup.sh create mode 120000 rc4.d/S01cron create mode 120000 rc4.d/S01dbus create mode 120000 rc4.d/S01grub-common create mode 120000 rc4.d/S01irqbalance create mode 120000 rc4.d/S01mysql create mode 120000 rc4.d/S01plymouth create mode 120000 rc4.d/S01postfix create mode 120000 rc4.d/S01rsync create mode 120000 rc4.d/S01rsyslog create mode 120000 rc4.d/S01ssh create mode 120000 rc4.d/S01uuidd create mode 120000 rc5.d/K01apache-htcacheclean create mode 120000 rc5.d/S01acpid create mode 120000 rc5.d/S01apache2 create mode 120000 rc5.d/S01bind9 create mode 120000 rc5.d/S01console-setup.sh create mode 120000 rc5.d/S01cron create mode 120000 rc5.d/S01dbus create mode 120000 rc5.d/S01grub-common create mode 120000 rc5.d/S01irqbalance create mode 120000 rc5.d/S01mysql create mode 120000 rc5.d/S01plymouth create mode 120000 rc5.d/S01postfix create mode 120000 rc5.d/S01rsync create mode 120000 rc5.d/S01rsyslog create mode 120000 rc5.d/S01ssh create mode 120000 rc5.d/S01uuidd create mode 120000 rc5.d/S99webmin create mode 120000 rc6.d/K01apache-htcacheclean create mode 120000 rc6.d/K01apache2 create mode 120000 rc6.d/K01bind9 create mode 120000 rc6.d/K01irqbalance create mode 120000 rc6.d/K01mysql create mode 120000 rc6.d/K01plymouth create mode 120000 rc6.d/K01postfix create mode 120000 rc6.d/K01rsyslog create mode 120000 rc6.d/K01uuidd create mode 120000 rc6.d/K10webmin create mode 120000 rcS.d/S01apparmor create mode 120000 rcS.d/S01keyboard-setup.sh create mode 120000 rcS.d/S01kmod create mode 120000 rcS.d/S01plymouth-log create mode 120000 rcS.d/S01procps create mode 120000 rcS.d/S01udev create mode 120000 rcS.d/S01ufw create mode 120000 resolv.conf create mode 100755 resolvconf/update-libc.d/postfix create mode 100755 rmt create mode 100644 rpc create mode 100644 rsyslog.conf create mode 100644 rsyslog.d/20-ufw.conf create mode 100644 rsyslog.d/50-default.conf create mode 100644 rsyslog.d/postfix.conf create mode 100644 securetty create mode 100644 security/access.conf create mode 100644 security/capability.conf create mode 100644 security/group.conf create mode 100644 security/limits.conf create mode 100644 security/namespace.conf create mode 100755 security/namespace.init create mode 100644 security/opasswd create mode 100644 security/pam_env.conf create mode 100644 security/sepermit.conf create mode 100644 security/time.conf create mode 100644 selinux/semanage.conf create mode 100644 services create mode 100644 shadow create mode 100644 shadow- create mode 100644 shells create mode 100644 skel/.bash_logout create mode 100644 skel/.bashrc create mode 100644 skel/.profile create mode 100644 ssh/moduli create mode 100644 ssh/ssh_config create mode 100644 ssh/ssh_host_ecdsa_key create mode 100644 ssh/ssh_host_ecdsa_key.pub create mode 100644 ssh/ssh_host_ed25519_key create mode 100644 ssh/ssh_host_ed25519_key.pub create mode 100644 ssh/ssh_host_rsa_key create mode 100644 ssh/ssh_host_rsa_key.pub create mode 100644 ssh/ssh_import_id create mode 100644 ssh/sshd_config create mode 120000 ssl/certs/02265526.0 create mode 120000 ssl/certs/03179a64.0 create mode 120000 ssl/certs/062cdee6.0 create mode 120000 ssl/certs/064e0aa9.0 create mode 120000 ssl/certs/06dc52d5.0 create mode 120000 ssl/certs/080911ac.0 create mode 120000 ssl/certs/09789157.0 create mode 120000 ssl/certs/0b1b94ef.0 create mode 120000 ssl/certs/0bf05006.0 create mode 120000 ssl/certs/0c4c9b6c.0 create mode 120000 ssl/certs/0f6fa695.0 create mode 120000 ssl/certs/106f3e4d.0 create mode 120000 ssl/certs/116bf586.0 create mode 120000 ssl/certs/128805a3.0 create mode 120000 ssl/certs/157753a5.0 create mode 120000 ssl/certs/1636090b.0 create mode 120000 ssl/certs/18856ac4.0 create mode 120000 ssl/certs/1d3472b9.0 create mode 120000 ssl/certs/1e08bfd1.0 create mode 120000 ssl/certs/1e09d511.0 create mode 120000 ssl/certs/244b5494.0 create mode 120000 ssl/certs/2ae6433e.0 create mode 120000 ssl/certs/2b349938.0 create mode 120000 ssl/certs/2c11d503.0 create mode 120000 ssl/certs/2c543cd1.0 create mode 120000 ssl/certs/2e4eed3c.0 create mode 120000 ssl/certs/2e5ac55d.0 create mode 120000 ssl/certs/32888f65.0 create mode 120000 ssl/certs/349f2832.0 create mode 120000 ssl/certs/3513523f.0 create mode 120000 ssl/certs/3bde41ac.0 create mode 120000 ssl/certs/3e44d2f7.0 create mode 120000 ssl/certs/3e45d192.0 create mode 120000 ssl/certs/40193066.0 create mode 120000 ssl/certs/4042bcee.0 create mode 120000 ssl/certs/40547a79.0 create mode 120000 ssl/certs/4304c5e5.0 create mode 120000 ssl/certs/451b5485.0 create mode 120000 ssl/certs/480720ec.0 create mode 120000 ssl/certs/48bec511.0 create mode 120000 ssl/certs/4a6481c9.0 create mode 120000 ssl/certs/4bfab552.0 create mode 120000 ssl/certs/4f316efb.0 create mode 120000 ssl/certs/5273a94c.0 create mode 120000 ssl/certs/5443e9e3.0 create mode 120000 ssl/certs/54657681.0 create mode 120000 ssl/certs/57bcb2da.0 create mode 120000 ssl/certs/5a4d6896.0 create mode 120000 ssl/certs/5ad8a5d6.0 create mode 120000 ssl/certs/5c44d531.0 create mode 120000 ssl/certs/5cd81ad7.0 create mode 120000 ssl/certs/5d3033c5.0 create mode 120000 ssl/certs/5f15c80c.0 create mode 120000 ssl/certs/607986c7.0 create mode 120000 ssl/certs/608a55ad.0 create mode 120000 ssl/certs/6410666e.0 create mode 120000 ssl/certs/653b494a.0 create mode 120000 ssl/certs/6b99d060.0 create mode 120000 ssl/certs/6d41d539.0 create mode 120000 ssl/certs/6fa5da56.0 create mode 120000 ssl/certs/706f604c.0 create mode 120000 ssl/certs/749e9e03.0 create mode 120000 ssl/certs/75d1b2ed.0 create mode 120000 ssl/certs/76cb8f92.0 create mode 120000 ssl/certs/76faf6c0.0 create mode 120000 ssl/certs/7719f463.0 create mode 120000 ssl/certs/7992b8bb.0 create mode 120000 ssl/certs/7aaf71c0.0 create mode 120000 ssl/certs/7d0b38bd.0 create mode 120000 ssl/certs/7f3d5d1d.0 create mode 120000 ssl/certs/812e17de.0 create mode 120000 ssl/certs/8160b96c.0 create mode 120000 ssl/certs/87229d21.0 create mode 120000 ssl/certs/8867006a.0 create mode 120000 ssl/certs/8cb5ee0f.0 create mode 120000 ssl/certs/8d86cdd1.0 create mode 120000 ssl/certs/9168f543.0 create mode 120000 ssl/certs/930ac5d2.0 create mode 120000 ssl/certs/93bc0acc.0 create mode 120000 ssl/certs/988a38cb.0 create mode 120000 ssl/certs/9c2e7d30.0 create mode 120000 ssl/certs/9c8dfbd4.0 create mode 120000 ssl/certs/9d04f354.0 create mode 120000 ssl/certs/9f0f5fd6.0 create mode 120000 ssl/certs/ACCVRAIZ1.pem create mode 120000 ssl/certs/AC_RAIZ_FNMT-RCM.pem create mode 120000 ssl/certs/Actalis_Authentication_Root_CA.pem create mode 120000 ssl/certs/AddTrust_External_Root.pem create mode 120000 ssl/certs/AffirmTrust_Commercial.pem create mode 120000 ssl/certs/AffirmTrust_Networking.pem create mode 120000 ssl/certs/AffirmTrust_Premium.pem create mode 120000 ssl/certs/AffirmTrust_Premium_ECC.pem create mode 120000 ssl/certs/Amazon_Root_CA_1.pem create mode 120000 ssl/certs/Amazon_Root_CA_2.pem create mode 120000 ssl/certs/Amazon_Root_CA_3.pem create mode 120000 ssl/certs/Amazon_Root_CA_4.pem create mode 120000 ssl/certs/Atos_TrustedRoot_2011.pem create mode 120000 ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem create mode 120000 ssl/certs/Baltimore_CyberTrust_Root.pem create mode 120000 ssl/certs/Buypass_Class_2_Root_CA.pem create mode 120000 ssl/certs/Buypass_Class_3_Root_CA.pem create mode 120000 ssl/certs/CA_Disig_Root_R2.pem create mode 120000 ssl/certs/CFCA_EV_ROOT.pem create mode 120000 ssl/certs/COMODO_Certification_Authority.pem create mode 120000 ssl/certs/COMODO_ECC_Certification_Authority.pem create mode 120000 ssl/certs/COMODO_RSA_Certification_Authority.pem create mode 120000 ssl/certs/Certigna.pem create mode 120000 ssl/certs/Certinomis_-_Root_CA.pem create mode 120000 ssl/certs/Certplus_Class_2_Primary_CA.pem create mode 120000 ssl/certs/Certplus_Root_CA_G1.pem create mode 120000 ssl/certs/Certplus_Root_CA_G2.pem create mode 120000 ssl/certs/Certum_Trusted_Network_CA.pem create mode 120000 ssl/certs/Certum_Trusted_Network_CA_2.pem create mode 120000 ssl/certs/Chambers_of_Commerce_Root_-_2008.pem create mode 120000 ssl/certs/Comodo_AAA_Services_root.pem create mode 120000 ssl/certs/Cybertrust_Global_Root.pem create mode 120000 ssl/certs/D-TRUST_Root_Class_3_CA_2_2009.pem create mode 120000 ssl/certs/D-TRUST_Root_Class_3_CA_2_EV_2009.pem create mode 120000 ssl/certs/DST_Root_CA_X3.pem create mode 120000 ssl/certs/Deutsche_Telekom_Root_CA_2.pem create mode 120000 ssl/certs/DigiCert_Assured_ID_Root_CA.pem create mode 120000 ssl/certs/DigiCert_Assured_ID_Root_G2.pem create mode 120000 ssl/certs/DigiCert_Assured_ID_Root_G3.pem create mode 120000 ssl/certs/DigiCert_Global_Root_CA.pem create mode 120000 ssl/certs/DigiCert_Global_Root_G2.pem create mode 120000 ssl/certs/DigiCert_Global_Root_G3.pem create mode 120000 ssl/certs/DigiCert_High_Assurance_EV_Root_CA.pem create mode 120000 ssl/certs/DigiCert_Trusted_Root_G4.pem create mode 120000 ssl/certs/E-Tugra_Certification_Authority.pem create mode 120000 ssl/certs/EC-ACC.pem create mode 120000 ssl/certs/EE_Certification_Centre_Root_CA.pem create mode 120000 ssl/certs/Entrust.net_Premium_2048_Secure_Server_CA.pem create mode 120000 ssl/certs/Entrust_Root_Certification_Authority.pem create mode 120000 ssl/certs/Entrust_Root_Certification_Authority_-_EC1.pem create mode 120000 ssl/certs/Entrust_Root_Certification_Authority_-_G2.pem create mode 120000 ssl/certs/GDCA_TrustAUTH_R5_ROOT.pem create mode 120000 ssl/certs/GeoTrust_Global_CA.pem create mode 120000 ssl/certs/GeoTrust_Primary_Certification_Authority.pem create mode 120000 ssl/certs/GeoTrust_Primary_Certification_Authority_-_G2.pem create mode 120000 ssl/certs/GeoTrust_Primary_Certification_Authority_-_G3.pem create mode 120000 ssl/certs/GeoTrust_Universal_CA.pem create mode 120000 ssl/certs/GeoTrust_Universal_CA_2.pem create mode 120000 ssl/certs/GlobalSign_ECC_Root_CA_-_R4.pem create mode 120000 ssl/certs/GlobalSign_ECC_Root_CA_-_R5.pem create mode 120000 ssl/certs/GlobalSign_Root_CA.pem create mode 120000 ssl/certs/GlobalSign_Root_CA_-_R2.pem create mode 120000 ssl/certs/GlobalSign_Root_CA_-_R3.pem create mode 120000 ssl/certs/Global_Chambersign_Root_-_2008.pem create mode 120000 ssl/certs/Go_Daddy_Class_2_CA.pem create mode 120000 ssl/certs/Go_Daddy_Root_Certificate_Authority_-_G2.pem create mode 120000 ssl/certs/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem create mode 120000 ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem create mode 120000 ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem create mode 120000 ssl/certs/Hongkong_Post_Root_CA_1.pem create mode 120000 ssl/certs/ISRG_Root_X1.pem create mode 120000 ssl/certs/IdenTrust_Commercial_Root_CA_1.pem create mode 120000 ssl/certs/IdenTrust_Public_Sector_Root_CA_1.pem create mode 120000 ssl/certs/Izenpe.com.pem create mode 120000 ssl/certs/LuxTrust_Global_Root_2.pem create mode 120000 ssl/certs/Microsec_e-Szigno_Root_CA_2009.pem create mode 120000 "ssl/certs/NetLock_Arany_=Class_Gold=_F\305\221tan\303\272s\303\255tv\303\241ny.pem" create mode 120000 ssl/certs/Network_Solutions_Certificate_Authority.pem create mode 120000 ssl/certs/OISTE_WISeKey_Global_Root_GA_CA.pem create mode 120000 ssl/certs/OISTE_WISeKey_Global_Root_GB_CA.pem create mode 120000 ssl/certs/OpenTrust_Root_CA_G1.pem create mode 120000 ssl/certs/OpenTrust_Root_CA_G2.pem create mode 120000 ssl/certs/OpenTrust_Root_CA_G3.pem create mode 120000 ssl/certs/QuoVadis_Root_CA.pem create mode 120000 ssl/certs/QuoVadis_Root_CA_1_G3.pem create mode 120000 ssl/certs/QuoVadis_Root_CA_2.pem create mode 120000 ssl/certs/QuoVadis_Root_CA_2_G3.pem create mode 120000 ssl/certs/QuoVadis_Root_CA_3.pem create mode 120000 ssl/certs/QuoVadis_Root_CA_3_G3.pem create mode 120000 ssl/certs/SSL.com_EV_Root_Certification_Authority_ECC.pem create mode 120000 ssl/certs/SSL.com_EV_Root_Certification_Authority_RSA_R2.pem create mode 120000 ssl/certs/SSL.com_Root_Certification_Authority_ECC.pem create mode 120000 ssl/certs/SSL.com_Root_Certification_Authority_RSA.pem create mode 120000 ssl/certs/SZAFIR_ROOT_CA2.pem create mode 120000 ssl/certs/SecureSign_RootCA11.pem create mode 120000 ssl/certs/SecureTrust_CA.pem create mode 120000 ssl/certs/Secure_Global_CA.pem create mode 120000 ssl/certs/Security_Communication_RootCA2.pem create mode 120000 ssl/certs/Security_Communication_Root_CA.pem create mode 120000 ssl/certs/Sonera_Class_2_Root_CA.pem create mode 120000 ssl/certs/Staat_der_Nederlanden_EV_Root_CA.pem create mode 120000 ssl/certs/Staat_der_Nederlanden_Root_CA_-_G2.pem create mode 120000 ssl/certs/Staat_der_Nederlanden_Root_CA_-_G3.pem create mode 120000 ssl/certs/Starfield_Class_2_CA.pem create mode 120000 ssl/certs/Starfield_Root_Certificate_Authority_-_G2.pem create mode 120000 ssl/certs/Starfield_Services_Root_Certificate_Authority_-_G2.pem create mode 120000 ssl/certs/SwissSign_Gold_CA_-_G2.pem create mode 120000 ssl/certs/SwissSign_Silver_CA_-_G2.pem create mode 120000 ssl/certs/T-TeleSec_GlobalRoot_Class_2.pem create mode 120000 ssl/certs/T-TeleSec_GlobalRoot_Class_3.pem create mode 120000 ssl/certs/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.pem create mode 120000 ssl/certs/TWCA_Global_Root_CA.pem create mode 120000 ssl/certs/TWCA_Root_Certification_Authority.pem create mode 120000 ssl/certs/Taiwan_GRCA.pem create mode 120000 ssl/certs/TeliaSonera_Root_CA_v1.pem create mode 120000 ssl/certs/TrustCor_ECA-1.pem create mode 120000 ssl/certs/TrustCor_RootCert_CA-1.pem create mode 120000 ssl/certs/TrustCor_RootCert_CA-2.pem create mode 120000 ssl/certs/Trustis_FPS_Root_CA.pem create mode 120000 "ssl/certs/T\303\234RKTRUST_Elektronik_Sertifika_Hizmet_Sa\304\237lay\304\261c\304\261s\304\261_H5.pem" create mode 120000 ssl/certs/USERTrust_ECC_Certification_Authority.pem create mode 120000 ssl/certs/USERTrust_RSA_Certification_Authority.pem create mode 120000 ssl/certs/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.pem create mode 120000 ssl/certs/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem create mode 120000 ssl/certs/VeriSign_Universal_Root_Certification_Authority.pem create mode 120000 ssl/certs/Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.pem create mode 120000 ssl/certs/Visa_eCommerce_Root.pem create mode 120000 ssl/certs/XRamp_Global_CA_Root.pem create mode 120000 ssl/certs/a760e1bd.0 create mode 120000 ssl/certs/a94d09e5.0 create mode 120000 ssl/certs/ad088e1d.0 create mode 120000 ssl/certs/aee5f10d.0 create mode 120000 ssl/certs/b0e59380.0 create mode 120000 ssl/certs/b1159c4c.0 create mode 120000 ssl/certs/b1b8a7f3.0 create mode 120000 ssl/certs/b204d74a.0 create mode 120000 ssl/certs/b66938e9.0 create mode 120000 ssl/certs/b727005e.0 create mode 120000 ssl/certs/b7a5b843.0 create mode 120000 ssl/certs/ba89ed3b.0 create mode 120000 ssl/certs/c01cdfa2.0 create mode 120000 ssl/certs/c089bbbd.0 create mode 120000 ssl/certs/c0ff1f52.0 create mode 120000 ssl/certs/c28a8a30.0 create mode 120000 ssl/certs/c47d9980.0 create mode 100644 ssl/certs/ca-certificates.crt create mode 120000 ssl/certs/ca6e4ad9.0 create mode 120000 ssl/certs/cb6768fd create mode 120000 ssl/certs/cbf06781.0 create mode 120000 ssl/certs/cc450945.0 create mode 120000 ssl/certs/cd58d51e.0 create mode 120000 ssl/certs/cd8c0d63.0 create mode 120000 ssl/certs/ce5e74ef.0 create mode 120000 ssl/certs/certSIGN_ROOT_CA.pem create mode 120000 ssl/certs/d4dae3dd.0 create mode 120000 ssl/certs/d6325660.0 create mode 120000 ssl/certs/d7e8dc79.0 create mode 120000 ssl/certs/d853d49e.0 create mode 120000 ssl/certs/dd8e9d41.0 create mode 120000 ssl/certs/de6d66f3.0 create mode 120000 ssl/certs/def36a68.0 create mode 120000 ssl/certs/e113c810.0 create mode 120000 ssl/certs/e18bfb83.0 create mode 120000 ssl/certs/e2799e36.0 create mode 120000 ssl/certs/e36a6752.0 create mode 120000 ssl/certs/e73d606e.0 create mode 120000 ssl/certs/e8de2f56.0 create mode 120000 ssl/certs/ePKI_Root_Certification_Authority.pem create mode 120000 ssl/certs/ee64a828.0 create mode 120000 ssl/certs/eed8c118.0 create mode 120000 ssl/certs/ef954a4e.0 create mode 120000 ssl/certs/f060240e.0 create mode 120000 ssl/certs/f081611a.0 create mode 120000 ssl/certs/f0c70a8d.0 create mode 120000 ssl/certs/f30dd6ad.0 create mode 120000 ssl/certs/f3377b1b.0 create mode 120000 ssl/certs/f387163d.0 create mode 120000 ssl/certs/f39fc864.0 create mode 120000 ssl/certs/fc5a8f99.0 create mode 120000 ssl/certs/fe8a2cd8.0 create mode 120000 ssl/certs/ff34af3f.0 create mode 100644 ssl/certs/ssl-cert-snakeoil.pem create mode 120000 ssl/certs/thawte_Primary_Root_CA.pem create mode 120000 ssl/certs/thawte_Primary_Root_CA_-_G2.pem create mode 120000 ssl/certs/thawte_Primary_Root_CA_-_G3.pem create mode 100644 ssl/openssl.cnf create mode 100644 ssl/private/ssl-cert-snakeoil.key create mode 100644 subgid create mode 100644 subgid- create mode 100644 subuid create mode 100644 subuid- create mode 100644 sudoers create mode 100644 sudoers.d/README create mode 100644 sysctl.conf create mode 100644 sysctl.d/10-console-messages.conf create mode 100644 sysctl.d/10-ipv6-privacy.conf create mode 100644 sysctl.d/10-kernel-hardening.conf create mode 100644 sysctl.d/10-link-restrictions.conf create mode 100644 sysctl.d/10-magic-sysrq.conf create mode 100644 sysctl.d/10-network-security.conf create mode 100644 sysctl.d/10-ptrace.conf create mode 100644 sysctl.d/10-zeropage.conf create mode 120000 sysctl.d/99-sysctl.conf create mode 100644 sysctl.d/README.sysctl create mode 100644 sysctl.d/protect-links.conf create mode 100644 systemd/journald.conf create mode 100644 systemd/logind.conf create mode 100644 systemd/resolved.conf create mode 100644 systemd/system.conf create mode 120000 systemd/system/dbus-org.freedesktop.resolve1.service create mode 120000 systemd/system/dbus-org.freedesktop.timesync1.service create mode 120000 systemd/system/default.target.wants/set-route-network.service create mode 120000 systemd/system/getty.target.wants/getty@tty1.service create mode 120000 systemd/system/graphical.target.wants/accounts-daemon.service create mode 120000 systemd/system/multi-user.target.wants/apache2.service create mode 120000 systemd/system/multi-user.target.wants/bind9.service create mode 120000 systemd/system/multi-user.target.wants/console-setup.service create mode 120000 systemd/system/multi-user.target.wants/cron.service create mode 120000 systemd/system/multi-user.target.wants/etckeeper.timer create mode 120000 systemd/system/multi-user.target.wants/irqbalance.service create mode 120000 systemd/system/multi-user.target.wants/mysql.service create mode 120000 systemd/system/multi-user.target.wants/networkd-dispatcher.service create mode 120000 systemd/system/multi-user.target.wants/ondemand.service create mode 120000 systemd/system/multi-user.target.wants/postfix.service create mode 120000 systemd/system/multi-user.target.wants/remote-fs.target create mode 120000 systemd/system/multi-user.target.wants/rsync.service create mode 120000 systemd/system/multi-user.target.wants/rsyslog.service create mode 120000 systemd/system/multi-user.target.wants/ssh.service create mode 120000 systemd/system/multi-user.target.wants/systemd-resolved.service create mode 120000 systemd/system/multi-user.target.wants/ufw.service create mode 120000 systemd/system/paths.target.wants/acpid.path create mode 100644 systemd/system/set-route-network.service create mode 120000 systemd/system/sockets.target.wants/acpid.socket create mode 120000 systemd/system/sockets.target.wants/uuidd.socket create mode 120000 systemd/system/sshd.service create mode 120000 systemd/system/sysinit.target.wants/apparmor.service create mode 120000 systemd/system/sysinit.target.wants/grub-initrd-fallback.service create mode 120000 systemd/system/sysinit.target.wants/keyboard-setup.service create mode 120000 systemd/system/sysinit.target.wants/setvtrgb.service create mode 120000 systemd/system/sysinit.target.wants/systemd-timesyncd.service create mode 120000 systemd/system/syslog.service create mode 120000 systemd/system/timers.target.wants/apt-daily-upgrade.timer create mode 120000 systemd/system/timers.target.wants/apt-daily.timer create mode 120000 systemd/system/timers.target.wants/fstrim.timer create mode 120000 systemd/system/timers.target.wants/logrotate.timer create mode 120000 systemd/system/timers.target.wants/motd-news.timer create mode 120000 systemd/system/timers.target.wants/phpsessionclean.timer create mode 100644 systemd/timesyncd.conf create mode 100644 systemd/user.conf create mode 100644 terminfo/README create mode 100644 timezone create mode 100644 ucf.conf create mode 100644 udev/udev.conf create mode 100644 ufw/after.init create mode 100644 ufw/after.rules create mode 100644 ufw/after6.rules create mode 100644 ufw/applications.d/apache2-utils.ufw.profile create mode 100644 ufw/applications.d/bind9 create mode 100644 ufw/applications.d/openssh-server create mode 100644 ufw/applications.d/postfix create mode 100644 ufw/before.init create mode 100644 ufw/before.rules create mode 100644 ufw/before6.rules create mode 100644 ufw/sysctl.conf create mode 100644 ufw/ufw.conf create mode 100644 ufw/user.rules create mode 100644 ufw/user6.rules create mode 100644 update-manager/meta-release create mode 100644 update-manager/release-upgrades create mode 100755 update-motd.d/00-header create mode 100755 update-motd.d/10-help-text create mode 100755 update-motd.d/50-motd-news create mode 100755 update-motd.d/80-esm create mode 100755 update-motd.d/80-livepatch create mode 100755 update-motd.d/91-release-upgrade create mode 100644 updatedb.conf create mode 100644 vim/vimrc create mode 100644 vim/vimrc.tiny create mode 120000 vtrgb create mode 100644 webmin/acl/config create mode 100644 webmin/adsl-client/config create mode 100644 webmin/ajaxterm/config create mode 100644 webmin/apache/config create mode 100644 webmin/at/config create mode 100644 webmin/backup-config/config create mode 100644 webmin/bacula-backup/config create mode 100644 webmin/bandwidth/config create mode 100644 webmin/bind8/config create mode 100644 webmin/burner/config create mode 100644 webmin/change-user/config create mode 100644 webmin/cluster-copy/config create mode 100644 webmin/cluster-cron/config create mode 100644 webmin/cluster-passwd/config create mode 100644 webmin/cluster-shell/config create mode 100644 webmin/cluster-software/config create mode 100644 webmin/cluster-useradmin/config create mode 100644 webmin/cluster-usermin/config create mode 100644 webmin/cluster-webmin/config create mode 100644 webmin/config create mode 100644 webmin/cpan/config create mode 100644 webmin/cron/config create mode 100644 webmin/custom/config create mode 100644 webmin/dfsadmin/config create mode 100644 webmin/dhcpd/config create mode 100644 webmin/dovecot/config create mode 100644 webmin/exim/config create mode 100644 webmin/exports/config create mode 100644 webmin/fail2ban/config create mode 100755 webmin/failed.pl create mode 100644 webmin/fdisk/config create mode 100644 webmin/fetchmail/config create mode 100644 webmin/file/config create mode 100644 webmin/filemin/config create mode 100644 webmin/filter/config create mode 100644 webmin/firewall/config create mode 100644 webmin/firewall6/config create mode 100644 webmin/firewalld/config create mode 100644 webmin/first-install create mode 100644 webmin/fsdump/config create mode 100644 webmin/grub/config create mode 100644 webmin/heartbeat/config create mode 100644 webmin/htaccess-htpasswd/config create mode 100644 webmin/idmapd/config create mode 100644 webmin/inetd/config create mode 100644 webmin/init/config create mode 100644 webmin/inittab/config create mode 100644 webmin/installed.cache create mode 100644 webmin/ipfilter/config create mode 100644 webmin/ipfw/config create mode 100644 webmin/ipsec/config create mode 100644 webmin/iscsi-client/config create mode 100644 webmin/iscsi-server/config create mode 100644 webmin/iscsi-target/config create mode 100644 webmin/iscsi-tgtd/config create mode 100644 webmin/jabber/config create mode 100644 webmin/krb5/config create mode 100644 webmin/ldap-client/config create mode 100644 webmin/ldap-server/config create mode 100644 webmin/ldap-useradmin/config create mode 100755 webmin/login.pl create mode 100755 webmin/logout.pl create mode 100644 webmin/logrotate/config create mode 100644 webmin/lpadmin/config create mode 100644 webmin/lvm/config create mode 100644 webmin/mailboxes/config create mode 100644 webmin/mailcap/config create mode 100644 webmin/man/config create mode 100644 webmin/miniserv.conf create mode 100644 webmin/miniserv.pem create mode 100644 webmin/miniserv.users create mode 100644 webmin/mon/config create mode 100644 webmin/mount/config create mode 100644 webmin/mysql/config create mode 100644 webmin/net/config create mode 100644 webmin/nis/config create mode 100644 webmin/openslp/config create mode 100644 webmin/package-updates/config create mode 100644 webmin/pam/config create mode 100644 webmin/pap/config create mode 100644 webmin/passwd/config create mode 100644 webmin/perl-path create mode 100644 webmin/phpini/config create mode 100644 webmin/postfix/config create mode 100644 webmin/postfix/version create mode 100644 webmin/postgresql/config create mode 100644 webmin/ppp-client/config create mode 100644 webmin/pptp-client/config create mode 100644 webmin/pptp-server/config create mode 100644 webmin/proc/config create mode 100644 webmin/procmail/config create mode 100644 webmin/proftpd/config create mode 100644 webmin/qmailadmin/config create mode 100644 webmin/quota/config create mode 100644 webmin/raid/config create mode 100755 webmin/reload create mode 100755 webmin/restart create mode 100644 webmin/samba/config create mode 100644 webmin/sarg/config create mode 100644 webmin/sendmail/config create mode 100644 webmin/servers/config create mode 100644 webmin/shell/config create mode 100644 webmin/shorewall/config create mode 100644 webmin/shorewall6/config create mode 100644 webmin/smart-status/config create mode 100644 webmin/smf/config create mode 100644 webmin/software/config create mode 100644 webmin/spam/config create mode 100644 webmin/squid/config create mode 100644 webmin/sshd/config create mode 100755 webmin/start create mode 100644 webmin/status/config create mode 100755 webmin/stop create mode 100644 webmin/stunnel/config create mode 100644 webmin/syslog-ng/config create mode 100644 webmin/syslog/config create mode 100644 webmin/system-status/config create mode 100755 webmin/system-status/enable-collection.pl create mode 100644 webmin/tcpwrappers/config create mode 100644 webmin/telnet/config create mode 100644 webmin/time/config create mode 100644 webmin/tunnel/config create mode 100755 webmin/uninstall.sh create mode 100644 webmin/updown/config create mode 100644 webmin/useradmin/config create mode 100644 webmin/usermin/config create mode 100644 webmin/var-path create mode 100644 webmin/version create mode 100644 webmin/vgetty/config create mode 100644 webmin/webalizer/config create mode 100644 webmin/webmin.acl create mode 100644 webmin/webmin/config create mode 100644 webmin/webmincron/config create mode 100644 webmin/webmincron/crons/15494592565952.cron create mode 100644 webmin/webmincron/crons/15494592566441.cron create mode 100644 webmin/webminlog/config create mode 100644 webmin/wuftpd/config create mode 100644 webmin/xinetd/config create mode 100644 wgetrc create mode 100644 xdg/autostart/xdg-user-dirs.desktop create mode 120000 xdg/systemd/user create mode 100644 xdg/user-dirs.conf create mode 100644 xdg/user-dirs.defaults create mode 100644 zsh_command_not_found diff --git a/.etckeeper b/.etckeeper new file mode 100755 index 0000000..28ba26f --- /dev/null +++ b/.etckeeper @@ -0,0 +1,1615 @@ +# Generated by etckeeper. Do not edit. + +mkdir -p './X11/xkb' +mkdir -p './acpi/events' +mkdir -p './apparmor.d/force-complain' +mkdir -p './apt/preferences.d' +mkdir -p './binfmt.d' +mkdir -p './ca-certificates/update.d' +mkdir -p './dbus-1/session.d' +mkdir -p './dpkg/dpkg.cfg.d' +mkdir -p './gss/mech.d' +mkdir -p './initramfs-tools/conf.d' +mkdir -p './initramfs-tools/hooks' +mkdir -p './initramfs-tools/scripts/init-bottom' +mkdir -p './initramfs-tools/scripts/init-premount' +mkdir -p './initramfs-tools/scripts/init-top' +mkdir -p './initramfs-tools/scripts/local-bottom' +mkdir -p './initramfs-tools/scripts/local-premount' +mkdir -p './initramfs-tools/scripts/local-top' +mkdir -p './initramfs-tools/scripts/nfs-bottom' +mkdir -p './initramfs-tools/scripts/nfs-premount' +mkdir -p './initramfs-tools/scripts/nfs-top' +mkdir -p './initramfs-tools/scripts/panic' +mkdir -p './kernel/install.d' +mkdir -p './networkd-dispatcher/dormant.d' +mkdir -p './networkd-dispatcher/no-carrier.d' +mkdir -p './networkd-dispatcher/off.d' +mkdir -p './networkd-dispatcher/routable.d' +mkdir -p './opt' +mkdir -p './perl/CPAN' +mkdir -p './phpmyadmin/conf.d' +mkdir -p './postfix/dynamicmaps.cf.d' +mkdir -p './postfix/postfix-files.d' +mkdir -p './postfix/sasl' +mkdir -p './security/limits.d' +mkdir -p './security/namespace.d' +mkdir -p './systemd/network' +mkdir -p './systemd/user' +mkdir -p './tmpfiles.d' +mkdir -p './udev/hwdb.d' +mkdir -p './udev/rules.d' +mkdir -p './ufw/applications.d/apache2' +mkdir -p './update-manager/release-upgrades.d' +maybe chmod 0755 '.' +maybe chmod 0700 '.etckeeper' +maybe chmod 0644 '.gitignore' +maybe chmod 0755 'X11' +maybe chmod 0755 'X11/Xsession.d' +maybe chmod 0644 'X11/Xsession.d/90gpg-agent' +maybe chmod 0755 'X11/xkb' +maybe chmod 0755 'acpi' +maybe chmod 0755 'acpi/events' +maybe chmod 0644 'adduser.conf' +maybe chmod 0644 'aliases' +maybe chmod 0644 'aliases.db' +maybe chmod 0755 'alternatives' +maybe chmod 0644 'alternatives/README' +maybe chmod 0755 'apache2' +maybe chmod 0644 'apache2/apache2.conf' +maybe chmod 0755 'apache2/conf-available' +maybe chmod 0644 'apache2/conf-available/charset.conf' +maybe chmod 0644 'apache2/conf-available/javascript-common.conf' +maybe chmod 0644 'apache2/conf-available/localized-error-pages.conf' +maybe chmod 0644 'apache2/conf-available/other-vhosts-access-log.conf' +maybe chmod 0644 'apache2/conf-available/security.conf' +maybe chmod 0644 'apache2/conf-available/serve-cgi-bin.conf' +maybe chmod 0755 'apache2/conf-enabled' +maybe chmod 0644 'apache2/envvars' +maybe chmod 0644 'apache2/magic' +maybe chmod 0755 'apache2/mods-available' +maybe chmod 0644 'apache2/mods-available/access_compat.load' +maybe chmod 0644 'apache2/mods-available/actions.conf' +maybe chmod 0644 'apache2/mods-available/actions.load' +maybe chmod 0644 'apache2/mods-available/alias.conf' +maybe chmod 0644 'apache2/mods-available/alias.load' +maybe chmod 0644 'apache2/mods-available/allowmethods.load' +maybe chmod 0644 'apache2/mods-available/asis.load' +maybe chmod 0644 'apache2/mods-available/auth_basic.load' +maybe chmod 0644 'apache2/mods-available/auth_digest.load' +maybe chmod 0644 'apache2/mods-available/auth_form.load' +maybe chmod 0644 'apache2/mods-available/authn_anon.load' +maybe chmod 0644 'apache2/mods-available/authn_core.load' +maybe chmod 0644 'apache2/mods-available/authn_dbd.load' +maybe chmod 0644 'apache2/mods-available/authn_dbm.load' +maybe chmod 0644 'apache2/mods-available/authn_file.load' +maybe chmod 0644 'apache2/mods-available/authn_socache.load' +maybe chmod 0644 'apache2/mods-available/authnz_fcgi.load' +maybe chmod 0644 'apache2/mods-available/authnz_ldap.load' +maybe chmod 0644 'apache2/mods-available/authz_core.load' +maybe chmod 0644 'apache2/mods-available/authz_dbd.load' +maybe chmod 0644 'apache2/mods-available/authz_dbm.load' +maybe chmod 0644 'apache2/mods-available/authz_groupfile.load' +maybe chmod 0644 'apache2/mods-available/authz_host.load' +maybe chmod 0644 'apache2/mods-available/authz_owner.load' +maybe chmod 0644 'apache2/mods-available/authz_user.load' +maybe chmod 0644 'apache2/mods-available/autoindex.conf' +maybe chmod 0644 'apache2/mods-available/autoindex.load' +maybe chmod 0644 'apache2/mods-available/brotli.load' +maybe chmod 0644 'apache2/mods-available/buffer.load' +maybe chmod 0644 'apache2/mods-available/cache.load' +maybe chmod 0644 'apache2/mods-available/cache_disk.conf' +maybe chmod 0644 'apache2/mods-available/cache_disk.load' +maybe chmod 0644 'apache2/mods-available/cache_socache.load' +maybe chmod 0644 'apache2/mods-available/cern_meta.load' +maybe chmod 0644 'apache2/mods-available/cgi.load' +maybe chmod 0644 'apache2/mods-available/cgid.conf' +maybe chmod 0644 'apache2/mods-available/cgid.load' +maybe chmod 0644 'apache2/mods-available/charset_lite.load' +maybe chmod 0644 'apache2/mods-available/data.load' +maybe chmod 0644 'apache2/mods-available/dav.load' +maybe chmod 0644 'apache2/mods-available/dav_fs.conf' +maybe chmod 0644 'apache2/mods-available/dav_fs.load' +maybe chmod 0644 'apache2/mods-available/dav_lock.load' +maybe chmod 0644 'apache2/mods-available/dbd.load' +maybe chmod 0644 'apache2/mods-available/deflate.conf' +maybe chmod 0644 'apache2/mods-available/deflate.load' +maybe chmod 0644 'apache2/mods-available/dialup.load' +maybe chmod 0644 'apache2/mods-available/dir.conf' +maybe chmod 0644 'apache2/mods-available/dir.load' +maybe chmod 0644 'apache2/mods-available/dump_io.load' +maybe chmod 0644 'apache2/mods-available/echo.load' +maybe chmod 0644 'apache2/mods-available/env.load' +maybe chmod 0644 'apache2/mods-available/expires.load' +maybe chmod 0644 'apache2/mods-available/ext_filter.load' +maybe chmod 0644 'apache2/mods-available/file_cache.load' +maybe chmod 0644 'apache2/mods-available/filter.load' +maybe chmod 0644 'apache2/mods-available/headers.load' +maybe chmod 0644 'apache2/mods-available/heartbeat.load' +maybe chmod 0644 'apache2/mods-available/heartmonitor.load' +maybe chmod 0644 'apache2/mods-available/http2.load' +maybe chmod 0644 'apache2/mods-available/ident.load' +maybe chmod 0644 'apache2/mods-available/imagemap.load' +maybe chmod 0644 'apache2/mods-available/include.load' +maybe chmod 0644 'apache2/mods-available/info.conf' +maybe chmod 0644 'apache2/mods-available/info.load' +maybe chmod 0644 'apache2/mods-available/lbmethod_bybusyness.load' +maybe chmod 0644 'apache2/mods-available/lbmethod_byrequests.load' +maybe chmod 0644 'apache2/mods-available/lbmethod_bytraffic.load' +maybe chmod 0644 'apache2/mods-available/lbmethod_heartbeat.load' +maybe chmod 0644 'apache2/mods-available/ldap.conf' +maybe chmod 0644 'apache2/mods-available/ldap.load' +maybe chmod 0644 'apache2/mods-available/log_debug.load' +maybe chmod 0644 'apache2/mods-available/log_forensic.load' +maybe chmod 0644 'apache2/mods-available/lua.load' +maybe chmod 0644 'apache2/mods-available/macro.load' +maybe chmod 0644 'apache2/mods-available/mime.conf' +maybe chmod 0644 'apache2/mods-available/mime.load' +maybe chmod 0644 'apache2/mods-available/mime_magic.conf' +maybe chmod 0644 'apache2/mods-available/mime_magic.load' +maybe chmod 0644 'apache2/mods-available/mpm_event.conf' +maybe chmod 0644 'apache2/mods-available/mpm_event.load' +maybe chmod 0644 'apache2/mods-available/mpm_prefork.conf' +maybe chmod 0644 'apache2/mods-available/mpm_prefork.load' +maybe chmod 0644 'apache2/mods-available/mpm_worker.conf' +maybe chmod 0644 'apache2/mods-available/mpm_worker.load' +maybe chmod 0644 'apache2/mods-available/negotiation.conf' +maybe chmod 0644 'apache2/mods-available/negotiation.load' +maybe chmod 0644 'apache2/mods-available/php7.2.conf' +maybe chmod 0644 'apache2/mods-available/php7.2.load' +maybe chmod 0644 'apache2/mods-available/proxy.conf' +maybe chmod 0644 'apache2/mods-available/proxy.load' +maybe chmod 0644 'apache2/mods-available/proxy_ajp.load' +maybe chmod 0644 'apache2/mods-available/proxy_balancer.conf' +maybe chmod 0644 'apache2/mods-available/proxy_balancer.load' +maybe chmod 0644 'apache2/mods-available/proxy_connect.load' +maybe chmod 0644 'apache2/mods-available/proxy_express.load' +maybe chmod 0644 'apache2/mods-available/proxy_fcgi.load' +maybe chmod 0644 'apache2/mods-available/proxy_fdpass.load' +maybe chmod 0644 'apache2/mods-available/proxy_ftp.conf' +maybe chmod 0644 'apache2/mods-available/proxy_ftp.load' +maybe chmod 0644 'apache2/mods-available/proxy_hcheck.load' +maybe chmod 0644 'apache2/mods-available/proxy_html.conf' +maybe chmod 0644 'apache2/mods-available/proxy_html.load' +maybe chmod 0644 'apache2/mods-available/proxy_http.load' +maybe chmod 0644 'apache2/mods-available/proxy_http2.load' +maybe chmod 0644 'apache2/mods-available/proxy_scgi.load' +maybe chmod 0644 'apache2/mods-available/proxy_uwsgi.load' +maybe chmod 0644 'apache2/mods-available/proxy_wstunnel.load' +maybe chmod 0644 'apache2/mods-available/ratelimit.load' +maybe chmod 0644 'apache2/mods-available/reflector.load' +maybe chmod 0644 'apache2/mods-available/remoteip.load' +maybe chmod 0644 'apache2/mods-available/reqtimeout.conf' +maybe chmod 0644 'apache2/mods-available/reqtimeout.load' +maybe chmod 0644 'apache2/mods-available/request.load' +maybe chmod 0644 'apache2/mods-available/rewrite.load' +maybe chmod 0644 'apache2/mods-available/sed.load' +maybe chmod 0644 'apache2/mods-available/session.load' +maybe chmod 0644 'apache2/mods-available/session_cookie.load' +maybe chmod 0644 'apache2/mods-available/session_crypto.load' +maybe chmod 0644 'apache2/mods-available/session_dbd.load' +maybe chmod 0644 'apache2/mods-available/setenvif.conf' +maybe chmod 0644 'apache2/mods-available/setenvif.load' +maybe chmod 0644 'apache2/mods-available/slotmem_plain.load' +maybe chmod 0644 'apache2/mods-available/slotmem_shm.load' +maybe chmod 0644 'apache2/mods-available/socache_dbm.load' +maybe chmod 0644 'apache2/mods-available/socache_memcache.load' +maybe chmod 0644 'apache2/mods-available/socache_shmcb.load' +maybe chmod 0644 'apache2/mods-available/speling.load' +maybe chmod 0644 'apache2/mods-available/ssl.conf' +maybe chmod 0644 'apache2/mods-available/ssl.load' +maybe chmod 0644 'apache2/mods-available/status.conf' +maybe chmod 0644 'apache2/mods-available/status.load' +maybe chmod 0644 'apache2/mods-available/substitute.load' +maybe chmod 0644 'apache2/mods-available/suexec.load' +maybe chmod 0644 'apache2/mods-available/unique_id.load' +maybe chmod 0644 'apache2/mods-available/userdir.conf' +maybe chmod 0644 'apache2/mods-available/userdir.load' +maybe chmod 0644 'apache2/mods-available/usertrack.load' +maybe chmod 0644 'apache2/mods-available/vhost_alias.load' +maybe chmod 0644 'apache2/mods-available/xml2enc.load' +maybe chmod 0755 'apache2/mods-enabled' +maybe chmod 0644 'apache2/ports.conf' +maybe chmod 0755 'apache2/sites-available' +maybe chmod 0644 'apache2/sites-available/000-default.conf' +maybe chmod 0644 'apache2/sites-available/default-ssl.conf' +maybe chmod 0755 'apache2/sites-enabled' +maybe chmod 0755 'apm' +maybe chmod 0755 'apm/event.d' +maybe chmod 0755 'apm/event.d/20hdparm' +maybe chmod 0755 'apparmor' +maybe chmod 0755 'apparmor.d' +maybe chmod 0755 'apparmor.d/abstractions' +maybe chmod 0644 'apparmor.d/abstractions/X' +maybe chmod 0644 'apparmor.d/abstractions/apache2-common' +maybe chmod 0755 'apparmor.d/abstractions/apparmor_api' +maybe chmod 0644 'apparmor.d/abstractions/apparmor_api/change_profile' +maybe chmod 0644 'apparmor.d/abstractions/apparmor_api/examine' +maybe chmod 0644 'apparmor.d/abstractions/apparmor_api/find_mountpoint' +maybe chmod 0644 'apparmor.d/abstractions/apparmor_api/introspect' +maybe chmod 0644 'apparmor.d/abstractions/apparmor_api/is_enabled' +maybe chmod 0644 'apparmor.d/abstractions/aspell' +maybe chmod 0644 'apparmor.d/abstractions/audio' +maybe chmod 0644 'apparmor.d/abstractions/authentication' +maybe chmod 0644 'apparmor.d/abstractions/base' +maybe chmod 0644 'apparmor.d/abstractions/bash' +maybe chmod 0644 'apparmor.d/abstractions/consoles' +maybe chmod 0644 'apparmor.d/abstractions/cups-client' +maybe chmod 0644 'apparmor.d/abstractions/dbus' +maybe chmod 0644 'apparmor.d/abstractions/dbus-accessibility' +maybe chmod 0644 'apparmor.d/abstractions/dbus-accessibility-strict' +maybe chmod 0644 'apparmor.d/abstractions/dbus-session' +maybe chmod 0644 'apparmor.d/abstractions/dbus-session-strict' +maybe chmod 0644 'apparmor.d/abstractions/dbus-strict' +maybe chmod 0644 'apparmor.d/abstractions/dconf' +maybe chmod 0644 'apparmor.d/abstractions/dovecot-common' +maybe chmod 0644 'apparmor.d/abstractions/enchant' +maybe chmod 0644 'apparmor.d/abstractions/fcitx' +maybe chmod 0644 'apparmor.d/abstractions/fcitx-strict' +maybe chmod 0644 'apparmor.d/abstractions/fonts' +maybe chmod 0644 'apparmor.d/abstractions/freedesktop.org' +maybe chmod 0644 'apparmor.d/abstractions/gnome' +maybe chmod 0644 'apparmor.d/abstractions/gnupg' +maybe chmod 0644 'apparmor.d/abstractions/ibus' +maybe chmod 0644 'apparmor.d/abstractions/kde' +maybe chmod 0644 'apparmor.d/abstractions/kerberosclient' +maybe chmod 0644 'apparmor.d/abstractions/launchpad-integration' +maybe chmod 0644 'apparmor.d/abstractions/ldapclient' +maybe chmod 0644 'apparmor.d/abstractions/libpam-systemd' +maybe chmod 0644 'apparmor.d/abstractions/likewise' +maybe chmod 0644 'apparmor.d/abstractions/mdns' +maybe chmod 0644 'apparmor.d/abstractions/mir' +maybe chmod 0644 'apparmor.d/abstractions/mozc' +maybe chmod 0644 'apparmor.d/abstractions/mysql' +maybe chmod 0644 'apparmor.d/abstractions/nameservice' +maybe chmod 0644 'apparmor.d/abstractions/nis' +maybe chmod 0644 'apparmor.d/abstractions/nvidia' +maybe chmod 0644 'apparmor.d/abstractions/openssl' +maybe chmod 0644 'apparmor.d/abstractions/orbit2' +maybe chmod 0644 'apparmor.d/abstractions/p11-kit' +maybe chmod 0644 'apparmor.d/abstractions/perl' +maybe chmod 0644 'apparmor.d/abstractions/php' +maybe chmod 0644 'apparmor.d/abstractions/php5' +maybe chmod 0644 'apparmor.d/abstractions/postfix-common' +maybe chmod 0644 'apparmor.d/abstractions/private-files' +maybe chmod 0644 'apparmor.d/abstractions/private-files-strict' +maybe chmod 0644 'apparmor.d/abstractions/python' +maybe chmod 0644 'apparmor.d/abstractions/ruby' +maybe chmod 0644 'apparmor.d/abstractions/samba' +maybe chmod 0644 'apparmor.d/abstractions/smbpass' +maybe chmod 0644 'apparmor.d/abstractions/ssl_certs' +maybe chmod 0644 'apparmor.d/abstractions/ssl_keys' +maybe chmod 0644 'apparmor.d/abstractions/svn-repositories' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-bittorrent-clients' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers' +maybe chmod 0755 'apparmor.d/abstractions/ubuntu-browsers.d' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers.d/java' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers.d/kde' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers.d/mailto' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers.d/multimedia' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers.d/plugins-common' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers.d/productivity' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers.d/text-editors' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers.d/ubuntu-integration' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers.d/ubuntu-integration-xul' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers.d/user-files' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-console-browsers' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-console-email' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-email' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-feed-readers' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-gnome-terminal' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-helpers' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-konsole' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-media-players' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-unity7-base' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-unity7-launcher' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-unity7-messaging' +maybe chmod 0644 'apparmor.d/abstractions/ubuntu-xterm' +maybe chmod 0644 'apparmor.d/abstractions/user-download' +maybe chmod 0644 'apparmor.d/abstractions/user-mail' +maybe chmod 0644 'apparmor.d/abstractions/user-manpages' +maybe chmod 0644 'apparmor.d/abstractions/user-tmp' +maybe chmod 0644 'apparmor.d/abstractions/user-write' +maybe chmod 0644 'apparmor.d/abstractions/video' +maybe chmod 0644 'apparmor.d/abstractions/wayland' +maybe chmod 0644 'apparmor.d/abstractions/web-data' +maybe chmod 0644 'apparmor.d/abstractions/winbind' +maybe chmod 0644 'apparmor.d/abstractions/wutmp' +maybe chmod 0644 'apparmor.d/abstractions/xad' +maybe chmod 0644 'apparmor.d/abstractions/xdg-desktop' +maybe chmod 0755 'apparmor.d/cache' +maybe chmod 0755 'apparmor.d/disable' +maybe chmod 0755 'apparmor.d/force-complain' +maybe chmod 0755 'apparmor.d/local' +maybe chmod 0644 'apparmor.d/local/README' +maybe chmod 0644 'apparmor.d/local/sbin.dhclient' +maybe chmod 0644 'apparmor.d/local/usr.bin.man' +maybe chmod 0644 'apparmor.d/local/usr.sbin.mysqld' +maybe chmod 0644 'apparmor.d/local/usr.sbin.named' +maybe chmod 0644 'apparmor.d/local/usr.sbin.rsyslogd' +maybe chmod 0644 'apparmor.d/local/usr.sbin.tcpdump' +maybe chmod 0644 'apparmor.d/sbin.dhclient' +maybe chmod 0755 'apparmor.d/tunables' +maybe chmod 0644 'apparmor.d/tunables/alias' +maybe chmod 0644 'apparmor.d/tunables/apparmorfs' +maybe chmod 0644 'apparmor.d/tunables/dovecot' +maybe chmod 0644 'apparmor.d/tunables/global' +maybe chmod 0644 'apparmor.d/tunables/home' +maybe chmod 0755 'apparmor.d/tunables/home.d' +maybe chmod 0644 'apparmor.d/tunables/home.d/site.local' +maybe chmod 0644 'apparmor.d/tunables/home.d/ubuntu' +maybe chmod 0644 'apparmor.d/tunables/kernelvars' +maybe chmod 0644 'apparmor.d/tunables/multiarch' +maybe chmod 0755 'apparmor.d/tunables/multiarch.d' +maybe chmod 0644 'apparmor.d/tunables/multiarch.d/site.local' +maybe chmod 0644 'apparmor.d/tunables/proc' +maybe chmod 0644 'apparmor.d/tunables/securityfs' +maybe chmod 0644 'apparmor.d/tunables/sys' +maybe chmod 0644 'apparmor.d/tunables/xdg-user-dirs' +maybe chmod 0755 'apparmor.d/tunables/xdg-user-dirs.d' +maybe chmod 0644 'apparmor.d/tunables/xdg-user-dirs.d/site.local' +maybe chmod 0644 'apparmor.d/usr.bin.man' +maybe chmod 0644 'apparmor.d/usr.sbin.mysqld' +maybe chmod 0644 'apparmor.d/usr.sbin.named' +maybe chmod 0644 'apparmor.d/usr.sbin.rsyslogd' +maybe chmod 0644 'apparmor.d/usr.sbin.tcpdump' +maybe chmod 0755 'apparmor/init' +maybe chmod 0755 'apparmor/init/network-interface-security' +maybe chmod 0644 'apparmor/parser.conf' +maybe chmod 0644 'apparmor/subdomain.conf' +maybe chmod 0755 'apt' +maybe chmod 0755 'apt/apt.conf.d' +maybe chmod 0644 'apt/apt.conf.d/00trustcdrom' +maybe chmod 0644 'apt/apt.conf.d/01-vendor-ubuntu' +maybe chmod 0644 'apt/apt.conf.d/01autoremove' +maybe chmod 0444 'apt/apt.conf.d/01autoremove-kernels' +maybe chmod 0644 'apt/apt.conf.d/05etckeeper' +maybe chmod 0644 'apt/apt.conf.d/20apt-show-versions' +maybe chmod 0644 'apt/apt.conf.d/50command-not-found' +maybe chmod 0644 'apt/apt.conf.d/70debconf' +maybe chmod 0755 'apt/preferences.d' +maybe chmod 0644 'apt/sources.list' +maybe chmod 0755 'apt/sources.list.d' +maybe chmod 0644 'apt/sources.list.d/webmin.list' +maybe chmod 0644 'apt/trusted.gpg' +maybe chmod 0755 'apt/trusted.gpg.d' +maybe chmod 0644 'apt/trusted.gpg.d/ubuntu-keyring-2012-archive.gpg' +maybe chmod 0644 'apt/trusted.gpg.d/ubuntu-keyring-2012-cdimage.gpg' +maybe chmod 0644 'apt/trusted.gpg.d/ubuntu-keyring-2018-archive.gpg' +maybe chmod 0644 'bash.bashrc' +maybe chmod 0644 'bash_completion' +maybe chmod 0755 'bash_completion.d' +maybe chmod 0644 'bash_completion.d/git-prompt' +maybe chmod 0644 'bash_completion.d/grub' +maybe chgrp 'bind' 'bind' +maybe chmod 2755 'bind' +maybe chmod 0644 'bind/bind.keys' +maybe chmod 0644 'bind/db.0' +maybe chmod 0644 'bind/db.127' +maybe chmod 0644 'bind/db.255' +maybe chmod 0644 'bind/db.empty' +maybe chmod 0644 'bind/db.local' +maybe chgrp 'bind' 'bind/named.conf' +maybe chmod 0644 'bind/named.conf' +maybe chgrp 'bind' 'bind/named.conf.default-zones' +maybe chmod 0644 'bind/named.conf.default-zones' +maybe chgrp 'bind' 'bind/named.conf.local' +maybe chmod 0644 'bind/named.conf.local' +maybe chgrp 'bind' 'bind/named.conf.options' +maybe chmod 0644 'bind/named.conf.options' +maybe chown 'bind' 'bind/rndc.key' +maybe chgrp 'bind' 'bind/rndc.key' +maybe chmod 0640 'bind/rndc.key' +maybe chmod 0644 'bind/zones.rfc1918' +maybe chmod 0644 'bindresvport.blacklist' +maybe chmod 0755 'binfmt.d' +maybe chmod 0755 'ca-certificates' +maybe chmod 0644 'ca-certificates.conf' +maybe chmod 0755 'ca-certificates/update.d' +maybe chmod 0755 'calendar' +maybe chmod 0644 'calendar/default' +maybe chmod 0755 'console-setup' +maybe chmod 0644 'console-setup/ISO-8859-1.acm' +maybe chmod 0644 'console-setup/Uni2-Fixed16.psf.gz' +maybe chmod 0644 'console-setup/cached_ISO-8859-1.acm.gz' +maybe chmod 0644 'console-setup/cached_ISO-8859-1_del.kmap.gz' +maybe chmod 0644 'console-setup/cached_UTF-8_del.kmap.gz' +maybe chmod 0644 'console-setup/cached_Uni2-Fixed16.psf.gz' +maybe chmod 0755 'console-setup/cached_setup_font.sh' +maybe chmod 0755 'console-setup/cached_setup_keyboard.sh' +maybe chmod 0755 'console-setup/cached_setup_terminal.sh' +maybe chmod 0644 'console-setup/compose.ARMSCII-8.inc' +maybe chmod 0644 'console-setup/compose.CP1251.inc' +maybe chmod 0644 'console-setup/compose.CP1255.inc' +maybe chmod 0644 'console-setup/compose.CP1256.inc' +maybe chmod 0644 'console-setup/compose.GEORGIAN-ACADEMY.inc' +maybe chmod 0644 'console-setup/compose.GEORGIAN-PS.inc' +maybe chmod 0644 'console-setup/compose.IBM1133.inc' +maybe chmod 0644 'console-setup/compose.ISIRI-3342.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-1.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-10.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-11.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-13.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-14.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-15.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-16.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-2.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-3.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-4.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-5.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-6.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-7.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-8.inc' +maybe chmod 0644 'console-setup/compose.ISO-8859-9.inc' +maybe chmod 0644 'console-setup/compose.KOI8-R.inc' +maybe chmod 0644 'console-setup/compose.KOI8-U.inc' +maybe chmod 0644 'console-setup/compose.TIS-620.inc' +maybe chmod 0644 'console-setup/compose.VISCII.inc' +maybe chmod 0644 'console-setup/remap.inc' +maybe chmod 0644 'console-setup/vtrgb' +maybe chmod 0644 'console-setup/vtrgb.vga' +maybe chmod 0755 'cron.d' +maybe chmod 0644 'cron.d/.placeholder' +maybe chmod 0644 'cron.d/php' +maybe chmod 0644 'cron.d/popularity-contest' +maybe chmod 0644 'cron.d/sync' +maybe chmod 0644 'cron.d/sysctl' +maybe chmod 0755 'cron.daily' +maybe chmod 0644 'cron.daily/.placeholder' +maybe chmod 0755 'cron.daily/apache2' +maybe chmod 0755 'cron.daily/apt-compat' +maybe chmod 0755 'cron.daily/apt-show-versions' +maybe chmod 0755 'cron.daily/bsdmainutils' +maybe chmod 0755 'cron.daily/dpkg' +maybe chmod 0755 'cron.daily/etckeeper' +maybe chmod 0755 'cron.daily/logrotate' +maybe chmod 0755 'cron.daily/man-db' +maybe chmod 0755 'cron.daily/mlocate' +maybe chmod 0755 'cron.daily/passwd' +maybe chmod 0755 'cron.daily/popularity-contest' +maybe chmod 0755 'cron.daily/ubuntu-advantage-tools' +maybe chmod 0755 'cron.hourly' +maybe chmod 0644 'cron.hourly/.placeholder' +maybe chmod 0755 'cron.monthly' +maybe chmod 0644 'cron.monthly/.placeholder' +maybe chmod 0755 'cron.weekly' +maybe chmod 0644 'cron.weekly/.placeholder' +maybe chmod 0755 'cron.weekly/man-db' +maybe chmod 0644 'crontab' +maybe chmod 0755 'cruft' +maybe chmod 0755 'cruft/filters-unex' +maybe chmod 0644 'cruft/filters-unex/etckeeper' +maybe chmod 0755 'dbconfig-common' +maybe chmod 0600 'dbconfig-common/config' +maybe chmod 0600 'dbconfig-common/phpmyadmin.conf' +maybe chmod 0755 'dbus-1' +maybe chmod 0755 'dbus-1/session.d' +maybe chmod 0755 'dbus-1/system.d' +maybe chmod 0644 'dbus-1/system.d/com.ubuntu.LanguageSelector.conf' +maybe chmod 0644 'dbus-1/system.d/org.freedesktop.Accounts.conf' +maybe chmod 0644 'debconf.conf' +maybe chmod 0644 'debian_version' +maybe chmod 0755 'default' +maybe chmod 0644 'default/acpid' +maybe chmod 0644 'default/amd64-microcode' +maybe chmod 0644 'default/apache-htcacheclean' +maybe chmod 0644 'default/bind9' +maybe chmod 0644 'default/bsdmainutils' +maybe chmod 0644 'default/console-setup' +maybe chmod 0644 'default/crda' +maybe chmod 0644 'default/cron' +maybe chmod 0644 'default/dbus' +maybe chmod 0644 'default/grub' +maybe chmod 0644 'default/intel-microcode' +maybe chmod 0644 'default/irqbalance' +maybe chmod 0644 'default/keyboard' +maybe chmod 0644 'default/locale' +maybe chmod 0644 'default/motd-news' +maybe chmod 0644 'default/networkd-dispatcher' +maybe chmod 0644 'default/nss' +maybe chmod 0644 'default/rsync' +maybe chmod 0644 'default/rsyslog' +maybe chmod 0644 'default/ssh' +maybe chmod 0644 'default/ufw' +maybe chmod 0644 'default/useradd' +maybe chmod 0644 'deluser.conf' +maybe chmod 0755 'depmod.d' +maybe chmod 0644 'depmod.d/ubuntu.conf' +maybe chmod 0755 'dhcp' +maybe chmod 0644 'dhcp/debug' +maybe chmod 0755 'dhcp/dhclient-enter-hooks.d' +maybe chmod 0755 'dhcp/dhclient-enter-hooks.d/resolved' +maybe chmod 0755 'dhcp/dhclient-exit-hooks.d' +maybe chmod 0644 'dhcp/dhclient-exit-hooks.d/rfc3442-classless-routes' +maybe chmod 0644 'dhcp/dhclient-exit-hooks.d/timesyncd' +maybe chmod 0644 'dhcp/dhclient.conf' +maybe chmod 0755 'dictionaries-common' +maybe chmod 0644 'dictionaries-common/ispell-default' +maybe chmod 0755 'dpkg' +maybe chmod 0644 'dpkg/dpkg.cfg' +maybe chmod 0755 'dpkg/dpkg.cfg.d' +maybe chmod 0755 'dpkg/origins' +maybe chmod 0644 'dpkg/origins/debian' +maybe chmod 0644 'dpkg/origins/ubuntu' +maybe chmod 0755 'emacs' +maybe chmod 0755 'emacs/site-start.d' +maybe chmod 0644 'emacs/site-start.d/50dictionaries-common.el' +maybe chmod 0644 'environment' +maybe chmod 0755 'etckeeper' +maybe chmod 0755 'etckeeper/commit.d' +maybe chmod 0755 'etckeeper/commit.d/10vcs-test' +maybe chmod 0755 'etckeeper/commit.d/30bzr-add' +maybe chmod 0755 'etckeeper/commit.d/30darcs-add' +maybe chmod 0755 'etckeeper/commit.d/30git-add' +maybe chmod 0755 'etckeeper/commit.d/30hg-addremove' +maybe chmod 0755 'etckeeper/commit.d/50vcs-commit' +maybe chmod 0755 'etckeeper/commit.d/99push' +maybe chmod 0644 'etckeeper/commit.d/README' +maybe chmod 0755 'etckeeper/daily' +maybe chmod 0644 'etckeeper/etckeeper.conf' +maybe chmod 0755 'etckeeper/init.d' +maybe chmod 0755 'etckeeper/init.d/10restore-metadata' +maybe chmod 0755 'etckeeper/init.d/20restore-etckeeper' +maybe chmod 0755 'etckeeper/init.d/40vcs-init' +maybe chmod 0755 'etckeeper/init.d/50vcs-ignore' +maybe chmod 0755 'etckeeper/init.d/50vcs-perm' +maybe chmod 0755 'etckeeper/init.d/50vcs-pre-commit-hook' +maybe chmod 0755 'etckeeper/init.d/60darcs-deleted-symlinks' +maybe chmod 0755 'etckeeper/init.d/70vcs-add' +maybe chmod 0644 'etckeeper/init.d/README' +maybe chmod 0755 'etckeeper/list-installed.d' +maybe chmod 0755 'etckeeper/list-installed.d/50list-installed' +maybe chmod 0755 'etckeeper/post-install.d' +maybe chmod 0755 'etckeeper/post-install.d/50vcs-commit' +maybe chmod 0644 'etckeeper/post-install.d/README' +maybe chmod 0755 'etckeeper/pre-commit.d' +maybe chmod 0755 'etckeeper/pre-commit.d/20warn-problem-files' +maybe chmod 0755 'etckeeper/pre-commit.d/30store-metadata' +maybe chmod 0644 'etckeeper/pre-commit.d/README' +maybe chmod 0755 'etckeeper/pre-install.d' +maybe chmod 0755 'etckeeper/pre-install.d/10packagelist' +maybe chmod 0755 'etckeeper/pre-install.d/50uncommitted-changes' +maybe chmod 0644 'etckeeper/pre-install.d/README' +maybe chmod 0755 'etckeeper/unclean.d' +maybe chmod 0755 'etckeeper/unclean.d/50test' +maybe chmod 0644 'etckeeper/unclean.d/README' +maybe chmod 0755 'etckeeper/uninit.d' +maybe chmod 0755 'etckeeper/uninit.d/01prompt' +maybe chmod 0755 'etckeeper/uninit.d/50remove-metadata' +maybe chmod 0755 'etckeeper/uninit.d/50vcs-uninit' +maybe chmod 0644 'etckeeper/uninit.d/README' +maybe chmod 0755 'etckeeper/update-ignore.d' +maybe chmod 0755 'etckeeper/update-ignore.d/01update-ignore' +maybe chmod 0644 'etckeeper/update-ignore.d/README' +maybe chmod 0755 'etckeeper/vcs.d' +maybe chmod 0755 'etckeeper/vcs.d/50vcs-cmd' +maybe chmod 0755 'fonts' +maybe chmod 0755 'fonts/conf.avail' +maybe chmod 0644 'fonts/conf.avail/10-antialias.conf' +maybe chmod 0644 'fonts/conf.avail/10-autohint.conf' +maybe chmod 0644 'fonts/conf.avail/10-hinting-full.conf' +maybe chmod 0644 'fonts/conf.avail/10-hinting-medium.conf' +maybe chmod 0644 'fonts/conf.avail/10-hinting-none.conf' +maybe chmod 0644 'fonts/conf.avail/10-hinting-slight.conf' +maybe chmod 0644 'fonts/conf.avail/10-no-sub-pixel.conf' +maybe chmod 0644 'fonts/conf.avail/10-scale-bitmap-fonts.conf' +maybe chmod 0644 'fonts/conf.avail/10-sub-pixel-bgr.conf' +maybe chmod 0644 'fonts/conf.avail/10-sub-pixel-rgb.conf' +maybe chmod 0644 'fonts/conf.avail/10-sub-pixel-vbgr.conf' +maybe chmod 0644 'fonts/conf.avail/10-sub-pixel-vrgb.conf' +maybe chmod 0644 'fonts/conf.avail/10-unhinted.conf' +maybe chmod 0644 'fonts/conf.avail/11-lcdfilter-default.conf' +maybe chmod 0644 'fonts/conf.avail/11-lcdfilter-legacy.conf' +maybe chmod 0644 'fonts/conf.avail/11-lcdfilter-light.conf' +maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf' +maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf' +maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf' +maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf' +maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-sans.conf' +maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-serif.conf' +maybe chmod 0644 'fonts/conf.avail/20-unhint-small-vera.conf' +maybe chmod 0644 'fonts/conf.avail/25-unhint-nonlatin.conf' +maybe chmod 0644 'fonts/conf.avail/30-cjk-aliases.conf' +maybe chmod 0644 'fonts/conf.avail/30-metric-aliases.conf' +maybe chmod 0644 'fonts/conf.avail/40-nonlatin.conf' +maybe chmod 0644 'fonts/conf.avail/45-generic.conf' +maybe chmod 0644 'fonts/conf.avail/45-latin.conf' +maybe chmod 0644 'fonts/conf.avail/49-sansserif.conf' +maybe chmod 0644 'fonts/conf.avail/50-user.conf' +maybe chmod 0644 'fonts/conf.avail/51-local.conf' +maybe chmod 0644 'fonts/conf.avail/53-monospace-lcd-filter.conf' +maybe chmod 0644 'fonts/conf.avail/57-dejavu-sans-mono.conf' +maybe chmod 0644 'fonts/conf.avail/57-dejavu-sans.conf' +maybe chmod 0644 'fonts/conf.avail/57-dejavu-serif.conf' +maybe chmod 0644 'fonts/conf.avail/58-dejavu-lgc-sans-mono.conf' +maybe chmod 0644 'fonts/conf.avail/58-dejavu-lgc-sans.conf' +maybe chmod 0644 'fonts/conf.avail/58-dejavu-lgc-serif.conf' +maybe chmod 0644 'fonts/conf.avail/60-generic.conf' +maybe chmod 0644 'fonts/conf.avail/60-latin.conf' +maybe chmod 0644 'fonts/conf.avail/64-language-selector-prefer.conf' +maybe chmod 0644 'fonts/conf.avail/65-fonts-persian.conf' +maybe chmod 0644 'fonts/conf.avail/65-khmer.conf' +maybe chmod 0644 'fonts/conf.avail/65-nonlatin.conf' +maybe chmod 0644 'fonts/conf.avail/69-language-selector-ja.conf' +maybe chmod 0644 'fonts/conf.avail/69-language-selector-zh-cn.conf' +maybe chmod 0644 'fonts/conf.avail/69-language-selector-zh-hk.conf' +maybe chmod 0644 'fonts/conf.avail/69-language-selector-zh-mo.conf' +maybe chmod 0644 'fonts/conf.avail/69-language-selector-zh-sg.conf' +maybe chmod 0644 'fonts/conf.avail/69-language-selector-zh-tw.conf' +maybe chmod 0644 'fonts/conf.avail/69-unifont.conf' +maybe chmod 0644 'fonts/conf.avail/70-force-bitmaps.conf' +maybe chmod 0644 'fonts/conf.avail/70-no-bitmaps.conf' +maybe chmod 0644 'fonts/conf.avail/70-yes-bitmaps.conf' +maybe chmod 0644 'fonts/conf.avail/80-delicious.conf' +maybe chmod 0644 'fonts/conf.avail/90-synthetic.conf' +maybe chmod 0644 'fonts/conf.avail/99-language-selector-zh.conf' +maybe chmod 0755 'fonts/conf.d' +maybe chmod 0644 'fonts/conf.d/README' +maybe chmod 0644 'fonts/fonts.conf' +maybe chmod 0644 'fstab' +maybe chmod 0644 'fuse.conf' +maybe chmod 0644 'gai.conf' +maybe chmod 0755 'groff' +maybe chmod 0644 'groff/man.local' +maybe chmod 0644 'groff/mdoc.local' +maybe chmod 0644 'group' +maybe chmod 0644 'group-' +maybe chmod 0755 'grub.d' +maybe chmod 0755 'grub.d/00_header' +maybe chmod 0755 'grub.d/05_debian_theme' +maybe chmod 0755 'grub.d/10_linux' +maybe chmod 0755 'grub.d/20_linux_xen' +maybe chmod 0755 'grub.d/30_os-prober' +maybe chmod 0755 'grub.d/30_uefi-firmware' +maybe chmod 0755 'grub.d/40_custom' +maybe chmod 0755 'grub.d/41_custom' +maybe chmod 0644 'grub.d/README' +maybe chgrp 'shadow' 'gshadow' +maybe chmod 0640 'gshadow' +maybe chgrp 'shadow' 'gshadow-' +maybe chmod 0640 'gshadow-' +maybe chmod 0755 'gss' +maybe chmod 0755 'gss/mech.d' +maybe chmod 0644 'hdparm.conf' +maybe chmod 0644 'host.conf' +maybe chmod 0644 'hostname' +maybe chmod 0644 'hosts' +maybe chmod 0644 'hosts.allow' +maybe chmod 0644 'hosts.deny' +maybe chmod 0755 'init' +maybe chmod 0755 'init.d' +maybe chmod 0755 'init.d/acpid' +maybe chmod 0755 'init.d/apache-htcacheclean' +maybe chmod 0755 'init.d/apache2' +maybe chmod 0755 'init.d/apparmor' +maybe chmod 0755 'init.d/bind9' +maybe chmod 0755 'init.d/console-setup.sh' +maybe chmod 0755 'init.d/cron' +maybe chmod 0755 'init.d/dbus' +maybe chmod 0755 'init.d/grub-common' +maybe chmod 0755 'init.d/hwclock.sh' +maybe chmod 0755 'init.d/irqbalance' +maybe chmod 0755 'init.d/keyboard-setup.sh' +maybe chmod 0755 'init.d/kmod' +maybe chmod 0755 'init.d/mysql' +maybe chmod 0755 'init.d/plymouth' +maybe chmod 0755 'init.d/plymouth-log' +maybe chmod 0755 'init.d/postfix' +maybe chmod 0755 'init.d/procps' +maybe chmod 0755 'init.d/rsync' +maybe chmod 0755 'init.d/rsyslog' +maybe chmod 0755 'init.d/ssh' +maybe chmod 0755 'init.d/udev' +maybe chmod 0755 'init.d/ufw' +maybe chmod 0755 'init.d/uuidd' +maybe chmod 0755 'init.d/webmin' +maybe chmod 0644 'init/mysql.conf' +maybe chmod 0755 'initramfs-tools' +maybe chmod 0755 'initramfs-tools/conf.d' +maybe chmod 0755 'initramfs-tools/hooks' +maybe chmod 0644 'initramfs-tools/initramfs.conf' +maybe chmod 0644 'initramfs-tools/modules' +maybe chmod 0755 'initramfs-tools/scripts' +maybe chmod 0755 'initramfs-tools/scripts/init-bottom' +maybe chmod 0755 'initramfs-tools/scripts/init-premount' +maybe chmod 0755 'initramfs-tools/scripts/init-top' +maybe chmod 0755 'initramfs-tools/scripts/local-bottom' +maybe chmod 0755 'initramfs-tools/scripts/local-premount' +maybe chmod 0755 'initramfs-tools/scripts/local-top' +maybe chmod 0755 'initramfs-tools/scripts/nfs-bottom' +maybe chmod 0755 'initramfs-tools/scripts/nfs-premount' +maybe chmod 0755 'initramfs-tools/scripts/nfs-top' +maybe chmod 0755 'initramfs-tools/scripts/panic' +maybe chmod 0644 'initramfs-tools/update-initramfs.conf' +maybe chmod 0644 'inputrc' +maybe chmod 0755 'insserv.conf.d' +maybe chmod 0644 'insserv.conf.d/bind9' +maybe chmod 0644 'insserv.conf.d/postfix' +maybe chmod 0755 'iproute2' +maybe chmod 0644 'iproute2/bpf_pinning' +maybe chmod 0644 'iproute2/ematch_map' +maybe chmod 0644 'iproute2/group' +maybe chmod 0644 'iproute2/nl_protos' +maybe chmod 0644 'iproute2/rt_dsfield' +maybe chmod 0644 'iproute2/rt_protos' +maybe chmod 0755 'iproute2/rt_protos.d' +maybe chmod 0644 'iproute2/rt_protos.d/README' +maybe chmod 0644 'iproute2/rt_realms' +maybe chmod 0644 'iproute2/rt_scopes' +maybe chmod 0644 'iproute2/rt_tables' +maybe chmod 0755 'iproute2/rt_tables.d' +maybe chmod 0644 'iproute2/rt_tables.d/README' +maybe chmod 0644 'issue' +maybe chmod 0644 'issue.net' +maybe chmod 0755 'kernel' +maybe chmod 0644 'kernel-img.conf' +maybe chmod 0755 'kernel/install.d' +maybe chmod 0755 'kernel/postinst.d' +maybe chmod 0755 'kernel/postinst.d/apt-auto-removal' +maybe chmod 0755 'kernel/postinst.d/initramfs-tools' +maybe chmod 0755 'kernel/postinst.d/zz-update-grub' +maybe chmod 0755 'kernel/postrm.d' +maybe chmod 0755 'kernel/postrm.d/initramfs-tools' +maybe chmod 0755 'kernel/postrm.d/zz-update-grub' +maybe chmod 0755 'kernel/preinst.d' +maybe chmod 0755 'kernel/preinst.d/intel-microcode' +maybe chmod 0644 'ld.so.conf' +maybe chmod 0755 'ld.so.conf.d' +maybe chmod 0644 'ld.so.conf.d/libc.conf' +maybe chmod 0644 'ld.so.conf.d/x86_64-linux-gnu.conf' +maybe chmod 0755 'ldap' +maybe chmod 0644 'ldap/ldap.conf' +maybe chmod 0644 'legal' +maybe chmod 0644 'libaudit.conf' +maybe chmod 0755 'libnl-3' +maybe chmod 0644 'libnl-3/classid' +maybe chmod 0644 'libnl-3/pktloc' +maybe chmod 0755 'lighttpd' +maybe chmod 0755 'lighttpd/conf-available' +maybe chmod 0644 'lighttpd/conf-available/90-javascript-alias.conf' +maybe chmod 0755 'lighttpd/conf-enabled' +maybe chmod 0644 'locale.alias' +maybe chmod 0644 'locale.gen' +maybe chmod 0755 'logcheck' +maybe chmod 0755 'logcheck/ignore.d.paranoid' +maybe chmod 0644 'logcheck/ignore.d.paranoid/mysql-server-5_7' +maybe chmod 0755 'logcheck/ignore.d.server' +maybe chmod 0644 'logcheck/ignore.d.server/gpg-agent' +maybe chmod 0644 'logcheck/ignore.d.server/libsasl2-modules' +maybe chmod 0644 'logcheck/ignore.d.server/mysql-server-5_7' +maybe chmod 0644 'logcheck/ignore.d.server/rsyslog' +maybe chmod 0755 'logcheck/ignore.d.workstation' +maybe chmod 0644 'logcheck/ignore.d.workstation/mysql-server-5_7' +maybe chmod 0644 'login.defs' +maybe chmod 0644 'logrotate.conf' +maybe chmod 0755 'logrotate.d' +maybe chmod 0644 'logrotate.d/alternatives' +maybe chmod 0644 'logrotate.d/apache2' +maybe chmod 0644 'logrotate.d/apt' +maybe chmod 0644 'logrotate.d/btmp' +maybe chmod 0644 'logrotate.d/dbconfig-common' +maybe chmod 0644 'logrotate.d/dpkg' +maybe chmod 0644 'logrotate.d/mysql-server' +maybe chmod 0644 'logrotate.d/rsyslog' +maybe chmod 0644 'logrotate.d/ufw' +maybe chmod 0644 'logrotate.d/wtmp' +maybe chmod 0644 'lsb-release' +maybe chmod 0644 'ltrace.conf' +maybe chmod 0444 'machine-id' +maybe chmod 0644 'magic' +maybe chmod 0644 'magic.mime' +maybe chmod 0644 'mailcap' +maybe chmod 0644 'mailcap.order' +maybe chmod 0644 'mailname' +maybe chmod 0644 'manpath.config' +maybe chmod 0644 'mime.types' +maybe chmod 0644 'mke2fs.conf' +maybe chmod 0755 'modprobe.d' +maybe chmod 0644 'modprobe.d/amd64-microcode-blacklist.conf' +maybe chmod 0644 'modprobe.d/blacklist-ath_pci.conf' +maybe chmod 0644 'modprobe.d/blacklist-firewire.conf' +maybe chmod 0644 'modprobe.d/blacklist-framebuffer.conf' +maybe chmod 0644 'modprobe.d/blacklist-rare-network.conf' +maybe chmod 0644 'modprobe.d/blacklist.conf' +maybe chmod 0644 'modprobe.d/intel-microcode-blacklist.conf' +maybe chmod 0644 'modprobe.d/iwlwifi.conf' +maybe chmod 0644 'modules' +maybe chmod 0755 'modules-load.d' +maybe chmod 0755 'mysql' +maybe chmod 0755 'mysql/conf.d' +maybe chmod 0644 'mysql/conf.d/mysql.cnf' +maybe chmod 0644 'mysql/conf.d/mysqldump.cnf' +maybe chmod 0755 'mysql/debian-start' +maybe chmod 0600 'mysql/debian.cnf' +maybe chmod 0644 'mysql/my.cnf.fallback' +maybe chmod 0644 'mysql/mysql.cnf' +maybe chmod 0755 'mysql/mysql.conf.d' +maybe chmod 0644 'mysql/mysql.conf.d/mysqld.cnf' +maybe chmod 0644 'mysql/mysql.conf.d/mysqld_safe_syslog.cnf' +maybe chmod 0644 'nanorc' +maybe chmod 0755 'netplan' +maybe chmod 0644 'netplan/01-netcfg.yaml' +maybe chmod 0755 'network' +maybe chmod 0755 'network/if-down.d' +maybe chmod 0755 'network/if-down.d/bind9' +maybe chmod 0755 'network/if-down.d/postfix' +maybe chmod 0755 'network/if-up.d' +maybe chmod 0755 'network/if-up.d/bind9' +maybe chmod 0755 'network/if-up.d/openssh-server' +maybe chmod 0755 'network/if-up.d/postfix' +maybe chmod 0644 'network/interfaces' +maybe chmod 0755 'networkd-dispatcher' +maybe chmod 0755 'networkd-dispatcher/dormant.d' +maybe chmod 0755 'networkd-dispatcher/no-carrier.d' +maybe chmod 0755 'networkd-dispatcher/off.d' +maybe chmod 0755 'networkd-dispatcher/routable.d' +maybe chmod 0644 'networks' +maybe chmod 0755 'newt' +maybe chmod 0644 'newt/palette.original' +maybe chmod 0644 'newt/palette.ubuntu' +maybe chmod 0644 'nsswitch.conf' +maybe chmod 0755 'opt' +maybe chmod 0644 'pam.conf' +maybe chmod 0755 'pam.d' +maybe chmod 0644 'pam.d/chfn' +maybe chmod 0644 'pam.d/chpasswd' +maybe chmod 0644 'pam.d/chsh' +maybe chmod 0644 'pam.d/common-account' +maybe chmod 0644 'pam.d/common-auth' +maybe chmod 0644 'pam.d/common-password' +maybe chmod 0644 'pam.d/common-session' +maybe chmod 0644 'pam.d/common-session-noninteractive' +maybe chmod 0644 'pam.d/cron' +maybe chmod 0644 'pam.d/login' +maybe chmod 0644 'pam.d/newusers' +maybe chmod 0644 'pam.d/other' +maybe chmod 0644 'pam.d/passwd' +maybe chmod 0644 'pam.d/runuser' +maybe chmod 0644 'pam.d/runuser-l' +maybe chmod 0644 'pam.d/sshd' +maybe chmod 0644 'pam.d/su' +maybe chmod 0644 'pam.d/sudo' +maybe chmod 0644 'pam.d/systemd-user' +maybe chmod 0664 'pam.d/webmin' +maybe chmod 0644 'passwd' +maybe chmod 0644 'passwd-' +maybe chmod 0755 'perl' +maybe chmod 0755 'perl/CPAN' +maybe chmod 0755 'perl/Net' +maybe chmod 0644 'perl/Net/libnet.cfg' +maybe chmod 0755 'php' +maybe chmod 0755 'php/7.2' +maybe chmod 0755 'php/7.2/apache2' +maybe chmod 0755 'php/7.2/apache2/conf.d' +maybe chmod 0644 'php/7.2/apache2/php.ini' +maybe chmod 0755 'php/7.2/cli' +maybe chmod 0755 'php/7.2/cli/conf.d' +maybe chmod 0644 'php/7.2/cli/php.ini' +maybe chmod 0755 'php/7.2/mods-available' +maybe chmod 0644 'php/7.2/mods-available/bz2.ini' +maybe chmod 0644 'php/7.2/mods-available/calendar.ini' +maybe chmod 0644 'php/7.2/mods-available/ctype.ini' +maybe chmod 0644 'php/7.2/mods-available/curl.ini' +maybe chmod 0644 'php/7.2/mods-available/dom.ini' +maybe chmod 0644 'php/7.2/mods-available/exif.ini' +maybe chmod 0644 'php/7.2/mods-available/fileinfo.ini' +maybe chmod 0644 'php/7.2/mods-available/ftp.ini' +maybe chmod 0644 'php/7.2/mods-available/gd.ini' +maybe chmod 0644 'php/7.2/mods-available/gettext.ini' +maybe chmod 0644 'php/7.2/mods-available/iconv.ini' +maybe chmod 0644 'php/7.2/mods-available/json.ini' +maybe chmod 0644 'php/7.2/mods-available/mbstring.ini' +maybe chmod 0644 'php/7.2/mods-available/mysqli.ini' +maybe chmod 0644 'php/7.2/mods-available/mysqlnd.ini' +maybe chmod 0644 'php/7.2/mods-available/opcache.ini' +maybe chmod 0644 'php/7.2/mods-available/pdo.ini' +maybe chmod 0644 'php/7.2/mods-available/pdo_mysql.ini' +maybe chmod 0644 'php/7.2/mods-available/phar.ini' +maybe chmod 0644 'php/7.2/mods-available/posix.ini' +maybe chmod 0644 'php/7.2/mods-available/readline.ini' +maybe chmod 0644 'php/7.2/mods-available/shmop.ini' +maybe chmod 0644 'php/7.2/mods-available/simplexml.ini' +maybe chmod 0644 'php/7.2/mods-available/sockets.ini' +maybe chmod 0644 'php/7.2/mods-available/sysvmsg.ini' +maybe chmod 0644 'php/7.2/mods-available/sysvsem.ini' +maybe chmod 0644 'php/7.2/mods-available/sysvshm.ini' +maybe chmod 0644 'php/7.2/mods-available/tokenizer.ini' +maybe chmod 0644 'php/7.2/mods-available/wddx.ini' +maybe chmod 0644 'php/7.2/mods-available/xml.ini' +maybe chmod 0644 'php/7.2/mods-available/xmlreader.ini' +maybe chmod 0644 'php/7.2/mods-available/xmlwriter.ini' +maybe chmod 0644 'php/7.2/mods-available/xsl.ini' +maybe chmod 0644 'php/7.2/mods-available/zip.ini' +maybe chmod 0755 'phpmyadmin' +maybe chmod 0644 'phpmyadmin/apache.conf' +maybe chmod 0755 'phpmyadmin/conf.d' +maybe chgrp 'www-data' 'phpmyadmin/config-db.php' +maybe chmod 0640 'phpmyadmin/config-db.php' +maybe chmod 0644 'phpmyadmin/config.footer.inc.php' +maybe chmod 0644 'phpmyadmin/config.header.inc.php' +maybe chmod 0644 'phpmyadmin/config.inc.php' +maybe chgrp 'www-data' 'phpmyadmin/htpasswd.setup' +maybe chmod 0640 'phpmyadmin/htpasswd.setup' +maybe chmod 0644 'phpmyadmin/lighttpd.conf' +maybe chmod 0644 'phpmyadmin/phpmyadmin.desktop' +maybe chmod 0644 'phpmyadmin/phpmyadmin.service' +maybe chmod 0755 'pm' +maybe chmod 0755 'pm/sleep.d' +maybe chmod 0755 'pm/sleep.d/10_grub-common' +maybe chmod 0644 'popularity-contest.conf' +maybe chmod 0755 'postfix' +maybe chmod 0644 'postfix/dynamicmaps.cf' +maybe chmod 0755 'postfix/dynamicmaps.cf.d' +maybe chmod 0644 'postfix/main.cf' +maybe chmod 0644 'postfix/main.cf.proto' +maybe chmod 0644 'postfix/makedefs.out' +maybe chmod 0644 'postfix/master.cf' +maybe chmod 0644 'postfix/master.cf.proto' +maybe chmod 0755 'postfix/post-install' +maybe chmod 0644 'postfix/postfix-files' +maybe chmod 0755 'postfix/postfix-files.d' +maybe chmod 0755 'postfix/postfix-script' +maybe chmod 0755 'postfix/sasl' +maybe chmod 0755 'ppp' +maybe chmod 0755 'ppp/ip-down.d' +maybe chmod 0755 'ppp/ip-down.d/bind9' +maybe chmod 0755 'ppp/ip-down.d/postfix' +maybe chmod 0755 'ppp/ip-up.d' +maybe chmod 0755 'ppp/ip-up.d/bind9' +maybe chmod 0755 'ppp/ip-up.d/postfix' +maybe chmod 0644 'profile' +maybe chmod 0755 'profile.d' +maybe chmod 0644 'profile.d/01-locale-fix.sh' +maybe chmod 0644 'profile.d/bash_completion.sh' +maybe chmod 0644 'profile.d/cedilla-portuguese.sh' +maybe chmod 0644 'protocols' +maybe chmod 0755 'python' +maybe chmod 0644 'python/debian_config' +maybe chmod 0755 'python2.7' +maybe chmod 0644 'python2.7/sitecustomize.py' +maybe chmod 0755 'python3' +maybe chmod 0755 'python3.6' +maybe chmod 0644 'python3.6/sitecustomize.py' +maybe chmod 0644 'python3/debian_config' +maybe chmod 0755 'rc0.d' +maybe chmod 0755 'rc1.d' +maybe chmod 0755 'rc2.d' +maybe chmod 0755 'rc3.d' +maybe chmod 0755 'rc4.d' +maybe chmod 0755 'rc5.d' +maybe chmod 0755 'rc6.d' +maybe chmod 0755 'rcS.d' +maybe chmod 0755 'resolvconf' +maybe chmod 0755 'resolvconf/update-libc.d' +maybe chmod 0755 'resolvconf/update-libc.d/postfix' +maybe chmod 0755 'rmt' +maybe chmod 0644 'rpc' +maybe chmod 0644 'rsyslog.conf' +maybe chmod 0755 'rsyslog.d' +maybe chmod 0644 'rsyslog.d/20-ufw.conf' +maybe chmod 0644 'rsyslog.d/50-default.conf' +maybe chmod 0644 'rsyslog.d/postfix.conf' +maybe chmod 0644 'securetty' +maybe chmod 0755 'security' +maybe chmod 0644 'security/access.conf' +maybe chmod 0644 'security/capability.conf' +maybe chmod 0644 'security/group.conf' +maybe chmod 0644 'security/limits.conf' +maybe chmod 0755 'security/limits.d' +maybe chmod 0644 'security/namespace.conf' +maybe chmod 0755 'security/namespace.d' +maybe chmod 0755 'security/namespace.init' +maybe chmod 0600 'security/opasswd' +maybe chmod 0644 'security/pam_env.conf' +maybe chmod 0644 'security/sepermit.conf' +maybe chmod 0644 'security/time.conf' +maybe chmod 0755 'selinux' +maybe chmod 0644 'selinux/semanage.conf' +maybe chmod 0644 'services' +maybe chgrp 'shadow' 'shadow' +maybe chmod 0640 'shadow' +maybe chgrp 'shadow' 'shadow-' +maybe chmod 0640 'shadow-' +maybe chmod 0644 'shells' +maybe chmod 0755 'skel' +maybe chmod 0644 'skel/.bash_logout' +maybe chmod 0644 'skel/.bashrc' +maybe chmod 0644 'skel/.profile' +maybe chmod 0755 'ssh' +maybe chmod 0644 'ssh/moduli' +maybe chmod 0644 'ssh/ssh_config' +maybe chmod 0600 'ssh/ssh_host_ecdsa_key' +maybe chmod 0644 'ssh/ssh_host_ecdsa_key.pub' +maybe chmod 0600 'ssh/ssh_host_ed25519_key' +maybe chmod 0644 'ssh/ssh_host_ed25519_key.pub' +maybe chmod 0600 'ssh/ssh_host_rsa_key' +maybe chmod 0644 'ssh/ssh_host_rsa_key.pub' +maybe chmod 0644 'ssh/ssh_import_id' +maybe chmod 0644 'ssh/sshd_config' +maybe chmod 0755 'ssl' +maybe chmod 0755 'ssl/certs' +maybe chmod 0644 'ssl/certs/ca-certificates.crt' +maybe chmod 0644 'ssl/certs/ssl-cert-snakeoil.pem' +maybe chmod 0644 'ssl/openssl.cnf' +maybe chgrp 'ssl-cert' 'ssl/private' +maybe chmod 0710 'ssl/private' +maybe chgrp 'ssl-cert' 'ssl/private/ssl-cert-snakeoil.key' +maybe chmod 0640 'ssl/private/ssl-cert-snakeoil.key' +maybe chmod 0644 'subgid' +maybe chmod 0644 'subgid-' +maybe chmod 0644 'subuid' +maybe chmod 0644 'subuid-' +maybe chmod 0440 'sudoers' +maybe chmod 0755 'sudoers.d' +maybe chmod 0440 'sudoers.d/README' +maybe chmod 0644 'sysctl.conf' +maybe chmod 0755 'sysctl.d' +maybe chmod 0644 'sysctl.d/10-console-messages.conf' +maybe chmod 0644 'sysctl.d/10-ipv6-privacy.conf' +maybe chmod 0644 'sysctl.d/10-kernel-hardening.conf' +maybe chmod 0644 'sysctl.d/10-link-restrictions.conf' +maybe chmod 0644 'sysctl.d/10-magic-sysrq.conf' +maybe chmod 0644 'sysctl.d/10-network-security.conf' +maybe chmod 0644 'sysctl.d/10-ptrace.conf' +maybe chmod 0644 'sysctl.d/10-zeropage.conf' +maybe chmod 0644 'sysctl.d/README.sysctl' +maybe chmod 0644 'sysctl.d/protect-links.conf' +maybe chmod 0755 'systemd' +maybe chmod 0644 'systemd/journald.conf' +maybe chmod 0644 'systemd/logind.conf' +maybe chmod 0755 'systemd/network' +maybe chmod 0644 'systemd/resolved.conf' +maybe chmod 0755 'systemd/system' +maybe chmod 0644 'systemd/system.conf' +maybe chmod 0755 'systemd/system/default.target.wants' +maybe chmod 0755 'systemd/system/getty.target.wants' +maybe chmod 0755 'systemd/system/graphical.target.wants' +maybe chmod 0755 'systemd/system/multi-user.target.wants' +maybe chmod 0755 'systemd/system/paths.target.wants' +maybe chmod 0664 'systemd/system/set-route-network.service' +maybe chmod 0755 'systemd/system/sockets.target.wants' +maybe chmod 0755 'systemd/system/sysinit.target.wants' +maybe chmod 0755 'systemd/system/timers.target.wants' +maybe chmod 0644 'systemd/timesyncd.conf' +maybe chmod 0755 'systemd/user' +maybe chmod 0644 'systemd/user.conf' +maybe chmod 0755 'terminfo' +maybe chmod 0644 'terminfo/README' +maybe chmod 0644 'timezone' +maybe chmod 0755 'tmpfiles.d' +maybe chmod 0644 'ucf.conf' +maybe chmod 0755 'udev' +maybe chmod 0755 'udev/hwdb.d' +maybe chmod 0755 'udev/rules.d' +maybe chmod 0644 'udev/udev.conf' +maybe chmod 0755 'ufw' +maybe chmod 0640 'ufw/after.init' +maybe chmod 0640 'ufw/after.rules' +maybe chmod 0640 'ufw/after6.rules' +maybe chmod 0755 'ufw/applications.d' +maybe chmod 0755 'ufw/applications.d/apache2' +maybe chmod 0644 'ufw/applications.d/apache2-utils.ufw.profile' +maybe chmod 0644 'ufw/applications.d/bind9' +maybe chmod 0644 'ufw/applications.d/openssh-server' +maybe chmod 0644 'ufw/applications.d/postfix' +maybe chmod 0640 'ufw/before.init' +maybe chmod 0640 'ufw/before.rules' +maybe chmod 0640 'ufw/before6.rules' +maybe chmod 0644 'ufw/sysctl.conf' +maybe chmod 0644 'ufw/ufw.conf' +maybe chmod 0640 'ufw/user.rules' +maybe chmod 0640 'ufw/user6.rules' +maybe chmod 0755 'update-manager' +maybe chmod 0644 'update-manager/meta-release' +maybe chmod 0644 'update-manager/release-upgrades' +maybe chmod 0755 'update-manager/release-upgrades.d' +maybe chmod 0755 'update-motd.d' +maybe chmod 0755 'update-motd.d/00-header' +maybe chmod 0755 'update-motd.d/10-help-text' +maybe chmod 0755 'update-motd.d/50-motd-news' +maybe chmod 0755 'update-motd.d/80-esm' +maybe chmod 0755 'update-motd.d/80-livepatch' +maybe chmod 0755 'update-motd.d/91-release-upgrade' +maybe chmod 0644 'updatedb.conf' +maybe chmod 0755 'vim' +maybe chmod 0644 'vim/vimrc' +maybe chmod 0644 'vim/vimrc.tiny' +maybe chmod 0755 'webmin' +maybe chgrp 'bin' 'webmin/acl' +maybe chmod 0711 'webmin/acl' +maybe chgrp 'bin' 'webmin/acl/config' +maybe chmod 0600 'webmin/acl/config' +maybe chgrp 'bin' 'webmin/adsl-client' +maybe chmod 0711 'webmin/adsl-client' +maybe chgrp 'bin' 'webmin/adsl-client/config' +maybe chmod 0600 'webmin/adsl-client/config' +maybe chgrp 'bin' 'webmin/ajaxterm' +maybe chmod 0711 'webmin/ajaxterm' +maybe chgrp 'bin' 'webmin/ajaxterm/config' +maybe chmod 0600 'webmin/ajaxterm/config' +maybe chgrp 'bin' 'webmin/apache' +maybe chmod 0711 'webmin/apache' +maybe chgrp 'bin' 'webmin/apache/config' +maybe chmod 0600 'webmin/apache/config' +maybe chgrp 'bin' 'webmin/at' +maybe chmod 0711 'webmin/at' +maybe chgrp 'bin' 'webmin/at/config' +maybe chmod 0600 'webmin/at/config' +maybe chgrp 'bin' 'webmin/backup-config' +maybe chmod 0711 'webmin/backup-config' +maybe chgrp 'bin' 'webmin/backup-config/config' +maybe chmod 0600 'webmin/backup-config/config' +maybe chgrp 'bin' 'webmin/bacula-backup' +maybe chmod 0711 'webmin/bacula-backup' +maybe chgrp 'bin' 'webmin/bacula-backup/config' +maybe chmod 0600 'webmin/bacula-backup/config' +maybe chgrp 'bin' 'webmin/bandwidth' +maybe chmod 0711 'webmin/bandwidth' +maybe chgrp 'bin' 'webmin/bandwidth/config' +maybe chmod 0600 'webmin/bandwidth/config' +maybe chgrp 'bin' 'webmin/bind8' +maybe chmod 0711 'webmin/bind8' +maybe chgrp 'bin' 'webmin/bind8/config' +maybe chmod 0600 'webmin/bind8/config' +maybe chgrp 'bin' 'webmin/burner' +maybe chmod 0711 'webmin/burner' +maybe chgrp 'bin' 'webmin/burner/config' +maybe chmod 0600 'webmin/burner/config' +maybe chgrp 'bin' 'webmin/change-user' +maybe chmod 0711 'webmin/change-user' +maybe chgrp 'bin' 'webmin/change-user/config' +maybe chmod 0600 'webmin/change-user/config' +maybe chgrp 'bin' 'webmin/cluster-copy' +maybe chmod 0711 'webmin/cluster-copy' +maybe chgrp 'bin' 'webmin/cluster-copy/config' +maybe chmod 0600 'webmin/cluster-copy/config' +maybe chgrp 'bin' 'webmin/cluster-cron' +maybe chmod 0711 'webmin/cluster-cron' +maybe chgrp 'bin' 'webmin/cluster-cron/config' +maybe chmod 0600 'webmin/cluster-cron/config' +maybe chgrp 'bin' 'webmin/cluster-passwd' +maybe chmod 0711 'webmin/cluster-passwd' +maybe chgrp 'bin' 'webmin/cluster-passwd/config' +maybe chmod 0600 'webmin/cluster-passwd/config' +maybe chgrp 'bin' 'webmin/cluster-shell' +maybe chmod 0711 'webmin/cluster-shell' +maybe chgrp 'bin' 'webmin/cluster-shell/config' +maybe chmod 0600 'webmin/cluster-shell/config' +maybe chgrp 'bin' 'webmin/cluster-software' +maybe chmod 0711 'webmin/cluster-software' +maybe chgrp 'bin' 'webmin/cluster-software/config' +maybe chmod 0600 'webmin/cluster-software/config' +maybe chgrp 'bin' 'webmin/cluster-useradmin' +maybe chmod 0711 'webmin/cluster-useradmin' +maybe chgrp 'bin' 'webmin/cluster-useradmin/config' +maybe chmod 0600 'webmin/cluster-useradmin/config' +maybe chgrp 'bin' 'webmin/cluster-usermin' +maybe chmod 0711 'webmin/cluster-usermin' +maybe chgrp 'bin' 'webmin/cluster-usermin/config' +maybe chmod 0600 'webmin/cluster-usermin/config' +maybe chgrp 'bin' 'webmin/cluster-webmin' +maybe chmod 0711 'webmin/cluster-webmin' +maybe chgrp 'bin' 'webmin/cluster-webmin/config' +maybe chmod 0600 'webmin/cluster-webmin/config' +maybe chmod 0644 'webmin/config' +maybe chgrp 'bin' 'webmin/cpan' +maybe chmod 0711 'webmin/cpan' +maybe chgrp 'bin' 'webmin/cpan/config' +maybe chmod 0600 'webmin/cpan/config' +maybe chgrp 'bin' 'webmin/cron' +maybe chmod 0711 'webmin/cron' +maybe chgrp 'bin' 'webmin/cron/config' +maybe chmod 0600 'webmin/cron/config' +maybe chgrp 'bin' 'webmin/custom' +maybe chmod 0711 'webmin/custom' +maybe chgrp 'bin' 'webmin/custom/config' +maybe chmod 0600 'webmin/custom/config' +maybe chgrp 'bin' 'webmin/dfsadmin' +maybe chmod 0711 'webmin/dfsadmin' +maybe chgrp 'bin' 'webmin/dfsadmin/config' +maybe chmod 0600 'webmin/dfsadmin/config' +maybe chgrp 'bin' 'webmin/dhcpd' +maybe chmod 0711 'webmin/dhcpd' +maybe chgrp 'bin' 'webmin/dhcpd/config' +maybe chmod 0600 'webmin/dhcpd/config' +maybe chgrp 'bin' 'webmin/dovecot' +maybe chmod 0711 'webmin/dovecot' +maybe chgrp 'bin' 'webmin/dovecot/config' +maybe chmod 0600 'webmin/dovecot/config' +maybe chgrp 'bin' 'webmin/exim' +maybe chmod 0711 'webmin/exim' +maybe chgrp 'bin' 'webmin/exim/config' +maybe chmod 0600 'webmin/exim/config' +maybe chgrp 'bin' 'webmin/exports' +maybe chmod 0711 'webmin/exports' +maybe chgrp 'bin' 'webmin/exports/config' +maybe chmod 0600 'webmin/exports/config' +maybe chgrp 'bin' 'webmin/fail2ban' +maybe chmod 0711 'webmin/fail2ban' +maybe chgrp 'bin' 'webmin/fail2ban/config' +maybe chmod 0600 'webmin/fail2ban/config' +maybe chmod 0755 'webmin/failed.pl' +maybe chgrp 'bin' 'webmin/fdisk' +maybe chmod 0711 'webmin/fdisk' +maybe chgrp 'bin' 'webmin/fdisk/config' +maybe chmod 0600 'webmin/fdisk/config' +maybe chgrp 'bin' 'webmin/fetchmail' +maybe chmod 0711 'webmin/fetchmail' +maybe chgrp 'bin' 'webmin/fetchmail/config' +maybe chmod 0600 'webmin/fetchmail/config' +maybe chgrp 'bin' 'webmin/file' +maybe chmod 0711 'webmin/file' +maybe chgrp 'bin' 'webmin/file/config' +maybe chmod 0600 'webmin/file/config' +maybe chgrp 'bin' 'webmin/filemin' +maybe chmod 0711 'webmin/filemin' +maybe chgrp 'bin' 'webmin/filemin/config' +maybe chmod 0600 'webmin/filemin/config' +maybe chgrp 'bin' 'webmin/filter' +maybe chmod 0711 'webmin/filter' +maybe chgrp 'bin' 'webmin/filter/config' +maybe chmod 0600 'webmin/filter/config' +maybe chgrp 'bin' 'webmin/firewall' +maybe chmod 0711 'webmin/firewall' +maybe chgrp 'bin' 'webmin/firewall/config' +maybe chmod 0600 'webmin/firewall/config' +maybe chgrp 'bin' 'webmin/firewall6' +maybe chmod 0711 'webmin/firewall6' +maybe chgrp 'bin' 'webmin/firewall6/config' +maybe chmod 0600 'webmin/firewall6/config' +maybe chgrp 'bin' 'webmin/firewalld' +maybe chmod 0711 'webmin/firewalld' +maybe chgrp 'bin' 'webmin/firewalld/config' +maybe chmod 0600 'webmin/firewalld/config' +maybe chmod 0644 'webmin/first-install' +maybe chgrp 'bin' 'webmin/fsdump' +maybe chmod 0711 'webmin/fsdump' +maybe chgrp 'bin' 'webmin/fsdump/config' +maybe chmod 0600 'webmin/fsdump/config' +maybe chgrp 'bin' 'webmin/grub' +maybe chmod 0711 'webmin/grub' +maybe chgrp 'bin' 'webmin/grub/config' +maybe chmod 0600 'webmin/grub/config' +maybe chgrp 'bin' 'webmin/heartbeat' +maybe chmod 0711 'webmin/heartbeat' +maybe chgrp 'bin' 'webmin/heartbeat/config' +maybe chmod 0600 'webmin/heartbeat/config' +maybe chgrp 'bin' 'webmin/htaccess-htpasswd' +maybe chmod 0711 'webmin/htaccess-htpasswd' +maybe chgrp 'bin' 'webmin/htaccess-htpasswd/config' +maybe chmod 0600 'webmin/htaccess-htpasswd/config' +maybe chgrp 'bin' 'webmin/idmapd' +maybe chmod 0711 'webmin/idmapd' +maybe chgrp 'bin' 'webmin/idmapd/config' +maybe chmod 0600 'webmin/idmapd/config' +maybe chgrp 'bin' 'webmin/inetd' +maybe chmod 0711 'webmin/inetd' +maybe chgrp 'bin' 'webmin/inetd/config' +maybe chmod 0600 'webmin/inetd/config' +maybe chgrp 'bin' 'webmin/init' +maybe chmod 0711 'webmin/init' +maybe chgrp 'bin' 'webmin/init/config' +maybe chmod 0600 'webmin/init/config' +maybe chgrp 'bin' 'webmin/inittab' +maybe chmod 0711 'webmin/inittab' +maybe chgrp 'bin' 'webmin/inittab/config' +maybe chmod 0600 'webmin/inittab/config' +maybe chmod 0644 'webmin/installed.cache' +maybe chgrp 'bin' 'webmin/ipfilter' +maybe chmod 0711 'webmin/ipfilter' +maybe chgrp 'bin' 'webmin/ipfilter/config' +maybe chmod 0600 'webmin/ipfilter/config' +maybe chgrp 'bin' 'webmin/ipfw' +maybe chmod 0711 'webmin/ipfw' +maybe chgrp 'bin' 'webmin/ipfw/config' +maybe chmod 0600 'webmin/ipfw/config' +maybe chgrp 'bin' 'webmin/ipsec' +maybe chmod 0711 'webmin/ipsec' +maybe chgrp 'bin' 'webmin/ipsec/config' +maybe chmod 0600 'webmin/ipsec/config' +maybe chgrp 'bin' 'webmin/iscsi-client' +maybe chmod 0711 'webmin/iscsi-client' +maybe chgrp 'bin' 'webmin/iscsi-client/config' +maybe chmod 0600 'webmin/iscsi-client/config' +maybe chgrp 'bin' 'webmin/iscsi-server' +maybe chmod 0711 'webmin/iscsi-server' +maybe chgrp 'bin' 'webmin/iscsi-server/config' +maybe chmod 0600 'webmin/iscsi-server/config' +maybe chgrp 'bin' 'webmin/iscsi-target' +maybe chmod 0711 'webmin/iscsi-target' +maybe chgrp 'bin' 'webmin/iscsi-target/config' +maybe chmod 0600 'webmin/iscsi-target/config' +maybe chgrp 'bin' 'webmin/iscsi-tgtd' +maybe chmod 0711 'webmin/iscsi-tgtd' +maybe chgrp 'bin' 'webmin/iscsi-tgtd/config' +maybe chmod 0600 'webmin/iscsi-tgtd/config' +maybe chgrp 'bin' 'webmin/jabber' +maybe chmod 0711 'webmin/jabber' +maybe chgrp 'bin' 'webmin/jabber/config' +maybe chmod 0600 'webmin/jabber/config' +maybe chgrp 'bin' 'webmin/krb5' +maybe chmod 0711 'webmin/krb5' +maybe chgrp 'bin' 'webmin/krb5/config' +maybe chmod 0600 'webmin/krb5/config' +maybe chgrp 'bin' 'webmin/ldap-client' +maybe chmod 0711 'webmin/ldap-client' +maybe chgrp 'bin' 'webmin/ldap-client/config' +maybe chmod 0600 'webmin/ldap-client/config' +maybe chgrp 'bin' 'webmin/ldap-server' +maybe chmod 0711 'webmin/ldap-server' +maybe chgrp 'bin' 'webmin/ldap-server/config' +maybe chmod 0600 'webmin/ldap-server/config' +maybe chgrp 'bin' 'webmin/ldap-useradmin' +maybe chmod 0711 'webmin/ldap-useradmin' +maybe chgrp 'bin' 'webmin/ldap-useradmin/config' +maybe chmod 0600 'webmin/ldap-useradmin/config' +maybe chmod 0755 'webmin/login.pl' +maybe chmod 0755 'webmin/logout.pl' +maybe chgrp 'bin' 'webmin/logrotate' +maybe chmod 0711 'webmin/logrotate' +maybe chgrp 'bin' 'webmin/logrotate/config' +maybe chmod 0600 'webmin/logrotate/config' +maybe chgrp 'bin' 'webmin/lpadmin' +maybe chmod 0711 'webmin/lpadmin' +maybe chgrp 'bin' 'webmin/lpadmin/config' +maybe chmod 0600 'webmin/lpadmin/config' +maybe chgrp 'bin' 'webmin/lvm' +maybe chmod 0711 'webmin/lvm' +maybe chgrp 'bin' 'webmin/lvm/config' +maybe chmod 0600 'webmin/lvm/config' +maybe chgrp 'bin' 'webmin/mailboxes' +maybe chmod 0711 'webmin/mailboxes' +maybe chgrp 'bin' 'webmin/mailboxes/config' +maybe chmod 0600 'webmin/mailboxes/config' +maybe chgrp 'bin' 'webmin/mailcap' +maybe chmod 0711 'webmin/mailcap' +maybe chgrp 'bin' 'webmin/mailcap/config' +maybe chmod 0600 'webmin/mailcap/config' +maybe chgrp 'bin' 'webmin/man' +maybe chmod 0711 'webmin/man' +maybe chgrp 'bin' 'webmin/man/config' +maybe chmod 0600 'webmin/man/config' +maybe chgrp 'bin' 'webmin/miniserv.conf' +maybe chmod 0600 'webmin/miniserv.conf' +maybe chgrp 'bin' 'webmin/miniserv.pem' +maybe chmod 0600 'webmin/miniserv.pem' +maybe chgrp 'bin' 'webmin/miniserv.users' +maybe chmod 0600 'webmin/miniserv.users' +maybe chgrp 'bin' 'webmin/mon' +maybe chmod 0711 'webmin/mon' +maybe chgrp 'bin' 'webmin/mon/config' +maybe chmod 0600 'webmin/mon/config' +maybe chgrp 'bin' 'webmin/mount' +maybe chmod 0711 'webmin/mount' +maybe chgrp 'bin' 'webmin/mount/config' +maybe chmod 0600 'webmin/mount/config' +maybe chgrp 'bin' 'webmin/mysql' +maybe chmod 0711 'webmin/mysql' +maybe chgrp 'bin' 'webmin/mysql/config' +maybe chmod 0600 'webmin/mysql/config' +maybe chgrp 'bin' 'webmin/net' +maybe chmod 0711 'webmin/net' +maybe chgrp 'bin' 'webmin/net/config' +maybe chmod 0600 'webmin/net/config' +maybe chgrp 'bin' 'webmin/nis' +maybe chmod 0711 'webmin/nis' +maybe chgrp 'bin' 'webmin/nis/config' +maybe chmod 0600 'webmin/nis/config' +maybe chgrp 'bin' 'webmin/openslp' +maybe chmod 0711 'webmin/openslp' +maybe chgrp 'bin' 'webmin/openslp/config' +maybe chmod 0600 'webmin/openslp/config' +maybe chgrp 'bin' 'webmin/package-updates' +maybe chmod 0711 'webmin/package-updates' +maybe chgrp 'bin' 'webmin/package-updates/config' +maybe chmod 0600 'webmin/package-updates/config' +maybe chgrp 'bin' 'webmin/pam' +maybe chmod 0711 'webmin/pam' +maybe chgrp 'bin' 'webmin/pam/config' +maybe chmod 0600 'webmin/pam/config' +maybe chgrp 'bin' 'webmin/pap' +maybe chmod 0711 'webmin/pap' +maybe chgrp 'bin' 'webmin/pap/config' +maybe chmod 0600 'webmin/pap/config' +maybe chgrp 'bin' 'webmin/passwd' +maybe chmod 0711 'webmin/passwd' +maybe chgrp 'bin' 'webmin/passwd/config' +maybe chmod 0600 'webmin/passwd/config' +maybe chmod 0644 'webmin/perl-path' +maybe chgrp 'bin' 'webmin/phpini' +maybe chmod 0711 'webmin/phpini' +maybe chgrp 'bin' 'webmin/phpini/config' +maybe chmod 0600 'webmin/phpini/config' +maybe chgrp 'bin' 'webmin/postfix' +maybe chmod 0711 'webmin/postfix' +maybe chgrp 'bin' 'webmin/postfix/config' +maybe chmod 0600 'webmin/postfix/config' +maybe chmod 0644 'webmin/postfix/version' +maybe chgrp 'bin' 'webmin/postgresql' +maybe chmod 0711 'webmin/postgresql' +maybe chgrp 'bin' 'webmin/postgresql/config' +maybe chmod 0600 'webmin/postgresql/config' +maybe chgrp 'bin' 'webmin/ppp-client' +maybe chmod 0711 'webmin/ppp-client' +maybe chgrp 'bin' 'webmin/ppp-client/config' +maybe chmod 0600 'webmin/ppp-client/config' +maybe chgrp 'bin' 'webmin/pptp-client' +maybe chmod 0711 'webmin/pptp-client' +maybe chgrp 'bin' 'webmin/pptp-client/config' +maybe chmod 0600 'webmin/pptp-client/config' +maybe chgrp 'bin' 'webmin/pptp-server' +maybe chmod 0711 'webmin/pptp-server' +maybe chgrp 'bin' 'webmin/pptp-server/config' +maybe chmod 0600 'webmin/pptp-server/config' +maybe chgrp 'bin' 'webmin/proc' +maybe chmod 0711 'webmin/proc' +maybe chgrp 'bin' 'webmin/proc/config' +maybe chmod 0600 'webmin/proc/config' +maybe chgrp 'bin' 'webmin/procmail' +maybe chmod 0711 'webmin/procmail' +maybe chgrp 'bin' 'webmin/procmail/config' +maybe chmod 0600 'webmin/procmail/config' +maybe chgrp 'bin' 'webmin/proftpd' +maybe chmod 0711 'webmin/proftpd' +maybe chgrp 'bin' 'webmin/proftpd/config' +maybe chmod 0600 'webmin/proftpd/config' +maybe chgrp 'bin' 'webmin/qmailadmin' +maybe chmod 0711 'webmin/qmailadmin' +maybe chgrp 'bin' 'webmin/qmailadmin/config' +maybe chmod 0600 'webmin/qmailadmin/config' +maybe chgrp 'bin' 'webmin/quota' +maybe chmod 0711 'webmin/quota' +maybe chgrp 'bin' 'webmin/quota/config' +maybe chmod 0600 'webmin/quota/config' +maybe chgrp 'bin' 'webmin/raid' +maybe chmod 0711 'webmin/raid' +maybe chgrp 'bin' 'webmin/raid/config' +maybe chmod 0600 'webmin/raid/config' +maybe chmod 0755 'webmin/reload' +maybe chmod 0755 'webmin/restart' +maybe chgrp 'bin' 'webmin/samba' +maybe chmod 0711 'webmin/samba' +maybe chgrp 'bin' 'webmin/samba/config' +maybe chmod 0600 'webmin/samba/config' +maybe chgrp 'bin' 'webmin/sarg' +maybe chmod 0711 'webmin/sarg' +maybe chgrp 'bin' 'webmin/sarg/config' +maybe chmod 0600 'webmin/sarg/config' +maybe chgrp 'bin' 'webmin/sendmail' +maybe chmod 0711 'webmin/sendmail' +maybe chgrp 'bin' 'webmin/sendmail/config' +maybe chmod 0600 'webmin/sendmail/config' +maybe chgrp 'bin' 'webmin/servers' +maybe chmod 0711 'webmin/servers' +maybe chgrp 'bin' 'webmin/servers/config' +maybe chmod 0600 'webmin/servers/config' +maybe chgrp 'bin' 'webmin/shell' +maybe chmod 0711 'webmin/shell' +maybe chgrp 'bin' 'webmin/shell/config' +maybe chmod 0600 'webmin/shell/config' +maybe chgrp 'bin' 'webmin/shorewall' +maybe chmod 0711 'webmin/shorewall' +maybe chgrp 'bin' 'webmin/shorewall/config' +maybe chmod 0600 'webmin/shorewall/config' +maybe chgrp 'bin' 'webmin/shorewall6' +maybe chmod 0711 'webmin/shorewall6' +maybe chgrp 'bin' 'webmin/shorewall6/config' +maybe chmod 0600 'webmin/shorewall6/config' +maybe chgrp 'bin' 'webmin/smart-status' +maybe chmod 0711 'webmin/smart-status' +maybe chgrp 'bin' 'webmin/smart-status/config' +maybe chmod 0600 'webmin/smart-status/config' +maybe chgrp 'bin' 'webmin/smf' +maybe chmod 0711 'webmin/smf' +maybe chgrp 'bin' 'webmin/smf/config' +maybe chmod 0600 'webmin/smf/config' +maybe chgrp 'bin' 'webmin/software' +maybe chmod 0711 'webmin/software' +maybe chgrp 'bin' 'webmin/software/config' +maybe chmod 0600 'webmin/software/config' +maybe chgrp 'bin' 'webmin/spam' +maybe chmod 0711 'webmin/spam' +maybe chgrp 'bin' 'webmin/spam/config' +maybe chmod 0600 'webmin/spam/config' +maybe chgrp 'bin' 'webmin/squid' +maybe chmod 0711 'webmin/squid' +maybe chgrp 'bin' 'webmin/squid/config' +maybe chmod 0600 'webmin/squid/config' +maybe chgrp 'bin' 'webmin/sshd' +maybe chmod 0711 'webmin/sshd' +maybe chgrp 'bin' 'webmin/sshd/config' +maybe chmod 0600 'webmin/sshd/config' +maybe chmod 0755 'webmin/start' +maybe chgrp 'bin' 'webmin/status' +maybe chmod 0711 'webmin/status' +maybe chgrp 'bin' 'webmin/status/config' +maybe chmod 0600 'webmin/status/config' +maybe chmod 0755 'webmin/stop' +maybe chgrp 'bin' 'webmin/stunnel' +maybe chmod 0711 'webmin/stunnel' +maybe chgrp 'bin' 'webmin/stunnel/config' +maybe chmod 0600 'webmin/stunnel/config' +maybe chgrp 'bin' 'webmin/syslog' +maybe chmod 0711 'webmin/syslog' +maybe chgrp 'bin' 'webmin/syslog-ng' +maybe chmod 0711 'webmin/syslog-ng' +maybe chgrp 'bin' 'webmin/syslog-ng/config' +maybe chmod 0600 'webmin/syslog-ng/config' +maybe chgrp 'bin' 'webmin/syslog/config' +maybe chmod 0600 'webmin/syslog/config' +maybe chgrp 'bin' 'webmin/system-status' +maybe chmod 0711 'webmin/system-status' +maybe chgrp 'bin' 'webmin/system-status/config' +maybe chmod 0600 'webmin/system-status/config' +maybe chmod 0755 'webmin/system-status/enable-collection.pl' +maybe chgrp 'bin' 'webmin/tcpwrappers' +maybe chmod 0711 'webmin/tcpwrappers' +maybe chgrp 'bin' 'webmin/tcpwrappers/config' +maybe chmod 0600 'webmin/tcpwrappers/config' +maybe chgrp 'bin' 'webmin/telnet' +maybe chmod 0711 'webmin/telnet' +maybe chgrp 'bin' 'webmin/telnet/config' +maybe chmod 0600 'webmin/telnet/config' +maybe chgrp 'bin' 'webmin/time' +maybe chmod 0711 'webmin/time' +maybe chgrp 'bin' 'webmin/time/config' +maybe chmod 0600 'webmin/time/config' +maybe chgrp 'bin' 'webmin/tunnel' +maybe chmod 0711 'webmin/tunnel' +maybe chgrp 'bin' 'webmin/tunnel/config' +maybe chmod 0600 'webmin/tunnel/config' +maybe chmod 0755 'webmin/uninstall.sh' +maybe chgrp 'bin' 'webmin/updown' +maybe chmod 0711 'webmin/updown' +maybe chgrp 'bin' 'webmin/updown/config' +maybe chmod 0600 'webmin/updown/config' +maybe chgrp 'bin' 'webmin/useradmin' +maybe chmod 0711 'webmin/useradmin' +maybe chgrp 'bin' 'webmin/useradmin/config' +maybe chmod 0600 'webmin/useradmin/config' +maybe chgrp 'bin' 'webmin/usermin' +maybe chmod 0711 'webmin/usermin' +maybe chgrp 'bin' 'webmin/usermin/config' +maybe chmod 0600 'webmin/usermin/config' +maybe chmod 0644 'webmin/var-path' +maybe chmod 0644 'webmin/version' +maybe chgrp 'bin' 'webmin/vgetty' +maybe chmod 0711 'webmin/vgetty' +maybe chgrp 'bin' 'webmin/vgetty/config' +maybe chmod 0600 'webmin/vgetty/config' +maybe chgrp 'bin' 'webmin/webalizer' +maybe chmod 0711 'webmin/webalizer' +maybe chgrp 'bin' 'webmin/webalizer/config' +maybe chmod 0600 'webmin/webalizer/config' +maybe chgrp 'bin' 'webmin/webmin' +maybe chmod 0711 'webmin/webmin' +maybe chmod 0600 'webmin/webmin.acl' +maybe chgrp 'bin' 'webmin/webmin/config' +maybe chmod 0600 'webmin/webmin/config' +maybe chgrp 'bin' 'webmin/webmincron' +maybe chmod 0711 'webmin/webmincron' +maybe chgrp 'bin' 'webmin/webmincron/config' +maybe chmod 0600 'webmin/webmincron/config' +maybe chmod 0700 'webmin/webmincron/crons' +maybe chmod 0644 'webmin/webmincron/crons/15494592565952.cron' +maybe chmod 0644 'webmin/webmincron/crons/15494592566441.cron' +maybe chgrp 'bin' 'webmin/webminlog' +maybe chmod 0711 'webmin/webminlog' +maybe chgrp 'bin' 'webmin/webminlog/config' +maybe chmod 0600 'webmin/webminlog/config' +maybe chgrp 'bin' 'webmin/wuftpd' +maybe chmod 0711 'webmin/wuftpd' +maybe chgrp 'bin' 'webmin/wuftpd/config' +maybe chmod 0600 'webmin/wuftpd/config' +maybe chgrp 'bin' 'webmin/xinetd' +maybe chmod 0711 'webmin/xinetd' +maybe chgrp 'bin' 'webmin/xinetd/config' +maybe chmod 0600 'webmin/xinetd/config' +maybe chmod 0644 'wgetrc' +maybe chmod 0755 'xdg' +maybe chmod 0755 'xdg/autostart' +maybe chmod 0644 'xdg/autostart/xdg-user-dirs.desktop' +maybe chmod 0755 'xdg/systemd' +maybe chmod 0644 'xdg/user-dirs.conf' +maybe chmod 0644 'xdg/user-dirs.defaults' +maybe chmod 0644 'zsh_command_not_found' diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..9196cf5 --- /dev/null +++ b/.gitignore @@ -0,0 +1,54 @@ +# begin section managed by etckeeper (do not edit this section by hand) + +# new and old versions of conffiles, stored by dpkg +*.dpkg-* +# new and old versions of conffiles, stored by ucf +*.ucf-* + +# old versions of files +*.old + +# mount(8) records system state here, no need to store these +blkid.tab +blkid.tab.old + +# some other files in /etc that typically do not need to be tracked +nologin +ld.so.cache +prelink.cache +mtab +mtab.fuselock +.pwd.lock +*.LOCK +network/run +adjtime +lvm/cache +lvm/archive +X11/xdm/authdir/authfiles/* +ntp.conf.dhcp +.initctl +webmin/fsdump/*.status +webmin/webmin/oscache +apparmor.d/cache/* +service/*/supervise/* +service/*/log/supervise/* +sv/*/supervise/* +sv/*/log/supervise/* +*.elc +*.pyc +*.pyo +init.d/.depend.* +openvpn/openvpn-status.log +cups/subscriptions.conf +cups/subscriptions.conf.O +fake-hwclock.data +check_mk/logwatch.state + +# editor temp files +*~ +.*.sw? +.sw? +\#*\# +DEADJOE + +# end section managed by etckeeper diff --git a/X11/Xsession.d/90gpg-agent b/X11/Xsession.d/90gpg-agent new file mode 100644 index 0000000..8b45b05 --- /dev/null +++ b/X11/Xsession.d/90gpg-agent @@ -0,0 +1,22 @@ +# On systems with systemd running, we expect the agent to be launched +# via systemd's user mode (see +# /usr/lib/systemd/user/gpg-agent.{socket,service} and +# systemd.unit(5)). This allows systemd to clean up the agent +# automatically at logout. + +# If systemd is absent from your system, or you do not permit it to +# run in user mode, then you may need to manually launch gpg-agent +# from your session initialization with something like "gpgconf +# --launch gpg-agent" + +# Nonetheless, ssh and older versions of gpg require environment +# variables to be set in order to find the agent, so we will set those +# here. + +agent_sock=$(gpgconf --list-dirs agent-socket) +export GPG_AGENT_INFO=${agent_sock}:0:1 +if [ -n "$(gpgconf --list-options gpg-agent | \ + awk -F: '/^enable-ssh-support:/{ print $10 }')" ]; then + export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket) +fi + diff --git a/adduser.conf b/adduser.conf new file mode 100644 index 0000000..d1e9e90 --- /dev/null +++ b/adduser.conf @@ -0,0 +1,88 @@ +# /etc/adduser.conf: `adduser' configuration. +# See adduser(8) and adduser.conf(5) for full documentation. + +# The DSHELL variable specifies the default login shell on your +# system. +DSHELL=/bin/bash + +# The DHOME variable specifies the directory containing users' home +# directories. +DHOME=/home + +# If GROUPHOMES is "yes", then the home directories will be created as +# /home/groupname/user. +GROUPHOMES=no + +# If LETTERHOMES is "yes", then the created home directories will have +# an extra directory - the first letter of the user name. For example: +# /home/u/user. +LETTERHOMES=no + +# The SKEL variable specifies the directory containing "skeletal" user +# files; in other words, files such as a sample .profile that will be +# copied to the new user's home directory when it is created. +SKEL=/etc/skel + +# FIRST_SYSTEM_[GU]ID to LAST_SYSTEM_[GU]ID inclusive is the range for UIDs +# for dynamically allocated administrative and system accounts/groups. +# Please note that system software, such as the users allocated by the base-passwd +# package, may assume that UIDs less than 100 are unallocated. +FIRST_SYSTEM_UID=100 +LAST_SYSTEM_UID=999 + +FIRST_SYSTEM_GID=100 +LAST_SYSTEM_GID=999 + +# FIRST_[GU]ID to LAST_[GU]ID inclusive is the range of UIDs of dynamically +# allocated user accounts/groups. +FIRST_UID=1000 +LAST_UID=59999 + +FIRST_GID=1000 +LAST_GID=59999 + +# The USERGROUPS variable can be either "yes" or "no". If "yes" each +# created user will be given their own group to use as a default. If +# "no", each created user will be placed in the group whose gid is +# USERS_GID (see below). +USERGROUPS=yes + +# If USERGROUPS is "no", then USERS_GID should be the GID of the group +# `users' (or the equivalent group) on your system. +USERS_GID=100 + +# If DIR_MODE is set, directories will be created with the specified +# mode. Otherwise the default mode 0755 will be used. +DIR_MODE=0755 + +# If SETGID_HOME is "yes" home directories for users with their own +# group the setgid bit will be set. This was the default for +# versions << 3.13 of adduser. Because it has some bad side effects we +# no longer do this per default. If you want it nevertheless you can +# still set it here. +SETGID_HOME=no + +# If QUOTAUSER is set, a default quota will be set from that user with +# `edquota -p QUOTAUSER newuser' +QUOTAUSER="" + +# If SKEL_IGNORE_REGEX is set, adduser will ignore files matching this +# regular expression when creating a new home directory +SKEL_IGNORE_REGEX="dpkg-(old|new|dist|save)" + +# Set this if you want the --add_extra_groups option to adduser to add +# new users to other groups. +# This is the list of groups that new non-system users will be added to +# Default: +#EXTRA_GROUPS="dialout cdrom floppy audio video plugdev users" + +# If ADD_EXTRA_GROUPS is set to something non-zero, the EXTRA_GROUPS +# option above will be default behavior for adding new, non-system users +#ADD_EXTRA_GROUPS=1 + + +# check user and group names also against this regular expression. +#NAME_REGEX="^[a-z][-a-z0-9_]*\$" + +# use extrausers by default +#USE_EXTRAUSERS=1 diff --git a/aliases b/aliases new file mode 100644 index 0000000..93a3249 --- /dev/null +++ b/aliases @@ -0,0 +1,2 @@ +# See man 5 aliases for format +postmaster: root diff --git a/aliases.db b/aliases.db new file mode 100644 index 0000000000000000000000000000000000000000..6bb04c131ba989c01d10654734a5cf265d15ba88 GIT binary patch literal 12288 zcmeI&u}Z^07{KxGLeV;u>*8yaq|#c!!9pVxj27+UVu%`WX-|@)Z{Zs_Ir#wk4sPNL zxc3zV!Mg?rGr4G&|B?H0d|&v6-*$Wv5m9dYm2GdxmOr%JZu)~rP`!S{`^{+(xO((b zHlFvZlJD`|$7dR@$J^b_MLl1AO+)|z1Q0*~0R#|0009ILKmdXN7O3CRoARKg^{GGf zQork0{iGkY%dikY009ILKmY**5I_I{1Q0;r&jeIqj1_fjN;}I+n-`)Mv+JFH*bO^Z zW^S`fQ|84YFFNzws`E*j49}+VX?i?NViomzQ8*a%_jY~d$W_whWHde;$0Kzh?(xgt t|7&ypwzO8IdVZDs&HUg0L%{sMG9)5^00IagfB*srAb); +# you will save yourself a lot of trouble. +# +# Do NOT add a slash at the end of the directory path. +# +#ServerRoot "/etc/apache2" + +# +# The accept serialization lock file MUST BE STORED ON A LOCAL DISK. +# +#Mutex file:${APACHE_LOCK_DIR} default + +# +# The directory where shm and other runtime files will be stored. +# + +DefaultRuntimeDir ${APACHE_RUN_DIR} + +# +# PidFile: The file in which the server should record its process +# identification number when it starts. +# This needs to be set in /etc/apache2/envvars +# +PidFile ${APACHE_PID_FILE} + +# +# Timeout: The number of seconds before receives and sends time out. +# +Timeout 300 + +# +# KeepAlive: Whether or not to allow persistent connections (more than +# one request per connection). Set to "Off" to deactivate. +# +KeepAlive On + +# +# MaxKeepAliveRequests: The maximum number of requests to allow +# during a persistent connection. Set to 0 to allow an unlimited amount. +# We recommend you leave this number high, for maximum performance. +# +MaxKeepAliveRequests 100 + +# +# KeepAliveTimeout: Number of seconds to wait for the next request from the +# same client on the same connection. +# +KeepAliveTimeout 5 + + +# These need to be set in /etc/apache2/envvars +User ${APACHE_RUN_USER} +Group ${APACHE_RUN_GROUP} + +# +# HostnameLookups: Log the names of clients or just their IP addresses +# e.g., www.apache.org (on) or 204.62.129.132 (off). +# The default is off because it'd be overall better for the net if people +# had to knowingly turn this feature on, since enabling it means that +# each client request will result in AT LEAST one lookup request to the +# nameserver. +# +HostnameLookups Off + +# ErrorLog: The location of the error log file. +# If you do not specify an ErrorLog directive within a +# container, error messages relating to that virtual host will be +# logged here. If you *do* define an error logfile for a +# container, that host's errors will be logged there and not here. +# +ErrorLog ${APACHE_LOG_DIR}/error.log + +# +# LogLevel: Control the severity of messages logged to the error_log. +# Available values: trace8, ..., trace1, debug, info, notice, warn, +# error, crit, alert, emerg. +# It is also possible to configure the log level for particular modules, e.g. +# "LogLevel info ssl:warn" +# +LogLevel warn + +# Include module configuration: +IncludeOptional mods-enabled/*.load +IncludeOptional mods-enabled/*.conf + +# Include list of ports to listen on +Include ports.conf + + +# Sets the default security model of the Apache2 HTTPD server. It does +# not allow access to the root filesystem outside of /usr/share and /var/www. +# The former is used by web applications packaged in Debian, +# the latter may be used for local directories served by the web server. If +# your system is serving content from a sub-directory in /srv you must allow +# access here, or in any related virtual host. + + Options FollowSymLinks + AllowOverride None + Require all denied + + + + AllowOverride None + Require all granted + + + + Options Indexes FollowSymLinks + AllowOverride None + Require all granted + + +# +# Options Indexes FollowSymLinks +# AllowOverride None +# Require all granted +# + + + + +# AccessFileName: The name of the file to look for in each directory +# for additional configuration directives. See also the AllowOverride +# directive. +# +AccessFileName .htaccess + +# +# The following lines prevent .htaccess and .htpasswd files from being +# viewed by Web clients. +# + + Require all denied + + + +# +# The following directives define some format nicknames for use with +# a CustomLog directive. +# +# These deviate from the Common Log Format definitions in that they use %O +# (the actual bytes sent including headers) instead of %b (the size of the +# requested file), because the latter makes it impossible to detect partial +# requests. +# +# Note that the use of %{X-Forwarded-For}i instead of %h is not recommended. +# Use mod_remoteip instead. +# +LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined +LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined +LogFormat "%h %l %u %t \"%r\" %>s %O" common +LogFormat "%{Referer}i -> %U" referer +LogFormat "%{User-agent}i" agent + +# Include of directories ignores editors' and dpkg's backup files, +# see README.Debian for details. + +# Include generic snippets of statements +IncludeOptional conf-enabled/*.conf + +# Include the virtual host configurations: +IncludeOptional sites-enabled/*.conf + +# vim: syntax=apache ts=4 sw=4 sts=4 sr noet diff --git a/apache2/conf-available/charset.conf b/apache2/conf-available/charset.conf new file mode 100644 index 0000000..8b0f415 --- /dev/null +++ b/apache2/conf-available/charset.conf @@ -0,0 +1,8 @@ +# Read the documentation before enabling AddDefaultCharset. +# In general, it is only a good idea if you know that all your files +# have this encoding. It will override any encoding given in the files +# in meta http-equiv or xml encoding tags. + +#AddDefaultCharset UTF-8 + +# vim: syntax=apache ts=4 sw=4 sts=4 sr noet diff --git a/apache2/conf-available/javascript-common.conf b/apache2/conf-available/javascript-common.conf new file mode 100644 index 0000000..7e5dbd3 --- /dev/null +++ b/apache2/conf-available/javascript-common.conf @@ -0,0 +1,5 @@ +Alias /javascript /usr/share/javascript/ + + + Options FollowSymLinks MultiViews + diff --git a/apache2/conf-available/localized-error-pages.conf b/apache2/conf-available/localized-error-pages.conf new file mode 100644 index 0000000..f188d80 --- /dev/null +++ b/apache2/conf-available/localized-error-pages.conf @@ -0,0 +1,81 @@ +# Customizable error responses come in three flavors: +# 1) plain text +# 2) local redirects +# 3) external redirects +# +# Some examples: +#ErrorDocument 500 "The server made a boo boo." +#ErrorDocument 404 /missing.html +#ErrorDocument 404 "/cgi-bin/missing_handler.pl" +#ErrorDocument 402 http://www.example.com/subscription_info.html +# + +# +# Putting this all together, we can internationalize error responses. +# +# We use Alias to redirect any /error/HTTP_.html.var response to +# our collection of by-error message multi-language collections. We use +# includes to substitute the appropriate text. +# +# You can modify the messages' appearance without changing any of the +# default HTTP_.html.var files by adding the line: +# +#Alias /error/include/ "/your/include/path/" +# +# which allows you to create your own set of files by starting with the +# /usr/share/apache2/error/include/ files and copying them to /your/include/path/, +# even on a per-VirtualHost basis. If you include the Alias in the global server +# context, is has to come _before_ the 'Alias /error/ ...' line. +# +# The default include files will display your Apache version number and your +# ServerAdmin email address regardless of the setting of ServerSignature. +# +# WARNING: The configuration below will NOT work out of the box if you have a +# SetHandler directive in a context somewhere. Adding +# the following three lines AFTER the context should +# make it work in most cases: +# +# SetHandler none +# +# +# The internationalized error documents require mod_alias, mod_include +# and mod_negotiation. To activate them, uncomment the following 37 lines. + +# +# +# +# +# Alias /error/ "/usr/share/apache2/error/" +# +# +# Options IncludesNoExec +# AddOutputFilter Includes html +# AddHandler type-map var +# Order allow,deny +# Allow from all +# LanguagePriority en cs de es fr it nl sv pt-br ro +# ForceLanguagePriority Prefer Fallback +# +# +# ErrorDocument 400 /error/HTTP_BAD_REQUEST.html.var +# ErrorDocument 401 /error/HTTP_UNAUTHORIZED.html.var +# ErrorDocument 403 /error/HTTP_FORBIDDEN.html.var +# ErrorDocument 404 /error/HTTP_NOT_FOUND.html.var +# ErrorDocument 405 /error/HTTP_METHOD_NOT_ALLOWED.html.var +# ErrorDocument 408 /error/HTTP_REQUEST_TIME_OUT.html.var +# ErrorDocument 410 /error/HTTP_GONE.html.var +# ErrorDocument 411 /error/HTTP_LENGTH_REQUIRED.html.var +# ErrorDocument 412 /error/HTTP_PRECONDITION_FAILED.html.var +# ErrorDocument 413 /error/HTTP_REQUEST_ENTITY_TOO_LARGE.html.var +# ErrorDocument 414 /error/HTTP_REQUEST_URI_TOO_LARGE.html.var +# ErrorDocument 415 /error/HTTP_UNSUPPORTED_MEDIA_TYPE.html.var +# ErrorDocument 500 /error/HTTP_INTERNAL_SERVER_ERROR.html.var +# ErrorDocument 501 /error/HTTP_NOT_IMPLEMENTED.html.var +# ErrorDocument 502 /error/HTTP_BAD_GATEWAY.html.var +# ErrorDocument 503 /error/HTTP_SERVICE_UNAVAILABLE.html.var +# ErrorDocument 506 /error/HTTP_VARIANT_ALSO_VARIES.html.var +# +# +# + +# vim: syntax=apache ts=4 sw=4 sts=4 sr noet diff --git a/apache2/conf-available/other-vhosts-access-log.conf b/apache2/conf-available/other-vhosts-access-log.conf new file mode 100644 index 0000000..5e9f5e9 --- /dev/null +++ b/apache2/conf-available/other-vhosts-access-log.conf @@ -0,0 +1,4 @@ +# Define an access log for VirtualHosts that don't define their own logfile +CustomLog ${APACHE_LOG_DIR}/other_vhosts_access.log vhost_combined + +# vim: syntax=apache ts=4 sw=4 sts=4 sr noet diff --git a/apache2/conf-available/phpmyadmin.conf b/apache2/conf-available/phpmyadmin.conf new file mode 120000 index 0000000..93808ae --- /dev/null +++ b/apache2/conf-available/phpmyadmin.conf @@ -0,0 +1 @@ +../../phpmyadmin/apache.conf \ No newline at end of file diff --git a/apache2/conf-available/security.conf b/apache2/conf-available/security.conf new file mode 100644 index 0000000..f9f69d4 --- /dev/null +++ b/apache2/conf-available/security.conf @@ -0,0 +1,73 @@ +# +# Disable access to the entire file system except for the directories that +# are explicitly allowed later. +# +# This currently breaks the configurations that come with some web application +# Debian packages. +# +# +# AllowOverride None +# Require all denied +# + + +# Changing the following options will not really affect the security of the +# server, but might make attacks slightly more difficult in some cases. + +# +# ServerTokens +# This directive configures what you return as the Server HTTP response +# Header. The default is 'Full' which sends information about the OS-Type +# and compiled in modules. +# Set to one of: Full | OS | Minimal | Minor | Major | Prod +# where Full conveys the most information, and Prod the least. +#ServerTokens Minimal +ServerTokens OS +#ServerTokens Full + +# +# Optionally add a line containing the server version and virtual host +# name to server-generated pages (internal error documents, FTP directory +# listings, mod_status and mod_info output etc., but not CGI generated +# documents or custom error documents). +# Set to "EMail" to also include a mailto: link to the ServerAdmin. +# Set to one of: On | Off | EMail +#ServerSignature Off +ServerSignature On + +# +# Allow TRACE method +# +# Set to "extended" to also reflect the request body (only for testing and +# diagnostic purposes). +# +# Set to one of: On | Off | extended +TraceEnable Off +#TraceEnable On + +# +# Forbid access to version control directories +# +# If you use version control systems in your document root, you should +# probably deny access to their directories. For example, for subversion: +# +# +# Require all denied +# + +# +# Setting this header will prevent MSIE from interpreting files as something +# else than declared by the content type in the HTTP headers. +# Requires mod_headers to be enabled. +# +#Header set X-Content-Type-Options: "nosniff" + +# +# Setting this header will prevent other sites from embedding pages from this +# site as frames. This defends against clickjacking attacks. +# Requires mod_headers to be enabled. +# +#Header set X-Frame-Options: "sameorigin" + + +# vim: syntax=apache ts=4 sw=4 sts=4 sr noet diff --git a/apache2/conf-available/serve-cgi-bin.conf b/apache2/conf-available/serve-cgi-bin.conf new file mode 100644 index 0000000..b02782d --- /dev/null +++ b/apache2/conf-available/serve-cgi-bin.conf @@ -0,0 +1,20 @@ + + + Define ENABLE_USR_LIB_CGI_BIN + + + + Define ENABLE_USR_LIB_CGI_BIN + + + + ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/ + + AllowOverride None + Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch + Require all granted + + + + +# vim: syntax=apache ts=4 sw=4 sts=4 sr noet diff --git a/apache2/conf-enabled/charset.conf b/apache2/conf-enabled/charset.conf new file mode 120000 index 0000000..4a6ca08 --- /dev/null +++ b/apache2/conf-enabled/charset.conf @@ -0,0 +1 @@ +../conf-available/charset.conf \ No newline at end of file diff --git a/apache2/conf-enabled/javascript-common.conf b/apache2/conf-enabled/javascript-common.conf new file mode 120000 index 0000000..0a4baa4 --- /dev/null +++ b/apache2/conf-enabled/javascript-common.conf @@ -0,0 +1 @@ +../conf-available/javascript-common.conf \ No newline at end of file diff --git a/apache2/conf-enabled/localized-error-pages.conf b/apache2/conf-enabled/localized-error-pages.conf new file mode 120000 index 0000000..6e5ddaf --- /dev/null +++ b/apache2/conf-enabled/localized-error-pages.conf @@ -0,0 +1 @@ +../conf-available/localized-error-pages.conf \ No newline at end of file diff --git a/apache2/conf-enabled/other-vhosts-access-log.conf b/apache2/conf-enabled/other-vhosts-access-log.conf new file mode 120000 index 0000000..8af91e5 --- /dev/null +++ b/apache2/conf-enabled/other-vhosts-access-log.conf @@ -0,0 +1 @@ +../conf-available/other-vhosts-access-log.conf \ No newline at end of file diff --git a/apache2/conf-enabled/phpmyadmin.conf b/apache2/conf-enabled/phpmyadmin.conf new file mode 120000 index 0000000..2baaf27 --- /dev/null +++ b/apache2/conf-enabled/phpmyadmin.conf @@ -0,0 +1 @@ +../conf-available/phpmyadmin.conf \ No newline at end of file diff --git a/apache2/conf-enabled/security.conf b/apache2/conf-enabled/security.conf new file mode 120000 index 0000000..036c97f --- /dev/null +++ b/apache2/conf-enabled/security.conf @@ -0,0 +1 @@ +../conf-available/security.conf \ No newline at end of file diff --git a/apache2/conf-enabled/serve-cgi-bin.conf b/apache2/conf-enabled/serve-cgi-bin.conf new file mode 120000 index 0000000..d917f68 --- /dev/null +++ b/apache2/conf-enabled/serve-cgi-bin.conf @@ -0,0 +1 @@ +../conf-available/serve-cgi-bin.conf \ No newline at end of file diff --git a/apache2/envvars b/apache2/envvars new file mode 100644 index 0000000..708d170 --- /dev/null +++ b/apache2/envvars @@ -0,0 +1,47 @@ +# envvars - default environment variables for apache2ctl + +# this won't be correct after changing uid +unset HOME + +# for supporting multiple apache2 instances +if [ "${APACHE_CONFDIR##/etc/apache2-}" != "${APACHE_CONFDIR}" ] ; then + SUFFIX="-${APACHE_CONFDIR##/etc/apache2-}" +else + SUFFIX= +fi + +# Since there is no sane way to get the parsed apache2 config in scripts, some +# settings are defined via environment variables and then used in apache2ctl, +# /etc/init.d/apache2, /etc/logrotate.d/apache2, etc. +export APACHE_RUN_USER=www-data +export APACHE_RUN_GROUP=www-data +# temporary state file location. This might be changed to /run in Wheezy+1 +export APACHE_PID_FILE=/var/run/apache2$SUFFIX/apache2.pid +export APACHE_RUN_DIR=/var/run/apache2$SUFFIX +export APACHE_LOCK_DIR=/var/lock/apache2$SUFFIX +# Only /var/log/apache2 is handled by /etc/logrotate.d/apache2. +export APACHE_LOG_DIR=/var/log/apache2$SUFFIX + +## The locale used by some modules like mod_dav +export LANG=C +## Uncomment the following line to use the system default locale instead: +#. /etc/default/locale + +export LANG + +## The command to get the status for 'apache2ctl status'. +## Some packages providing 'www-browser' need '--dump' instead of '-dump'. +#export APACHE_LYNX='www-browser -dump' + +## If you need a higher file descriptor limit, uncomment and adjust the +## following line (default is 8192): +#APACHE_ULIMIT_MAX_FILES='ulimit -n 65536' + +## If you would like to pass arguments to the web server, add them below +## to the APACHE_ARGUMENTS environment. +#export APACHE_ARGUMENTS='' + +## Enable the debug mode for maintainer scripts. +## This will produce a verbose output on package installations of web server modules and web application +## installations which interact with Apache +#export APACHE2_MAINTSCRIPT_DEBUG=1 diff --git a/apache2/magic b/apache2/magic new file mode 100644 index 0000000..cdf9ac5 --- /dev/null +++ b/apache2/magic @@ -0,0 +1,935 @@ +# Magic data for mod_mime_magic (originally for file(1) command) +# +# The format is 4-5 columns: +# Column #1: byte number to begin checking from, ">" indicates continuation +# Column #2: type of data to match +# Column #3: contents of data to match +# Column #4: MIME type of result +# Column #5: MIME encoding of result (optional) + +#------------------------------------------------------------------------------ +# Localstuff: file(1) magic for locally observed files +# Add any locally observed files here. + +# Real Audio (Magic .ra\0375) +0 belong 0x2e7261fd audio/x-pn-realaudio +0 string .RMF application/vnd.rn-realmedia + +#video/x-pn-realvideo +#video/vnd.rn-realvideo +#application/vnd.rn-realmedia +# sigh, there are many mimes for that but the above are the most common. + +# Taken from magic, converted to magic.mime +# mime types according to http://www.geocities.com/nevilo/mod.htm: +# audio/it .it +# audio/x-zipped-it .itz +# audio/xm fasttracker modules +# audio/x-s3m screamtracker modules +# audio/s3m screamtracker modules +# audio/x-zipped-mod mdz +# audio/mod mod +# audio/x-mod All modules (mod, s3m, 669, mtm, med, xm, it, mdz, stm, itz, xmz, s3z) + +# Taken from loader code from mikmod version 2.14 +# by Steve McIntyre (stevem@chiark.greenend.org.uk) +# added title printing on 2003-06-24 +0 string MAS_UTrack_V00 +>14 string >/0 audio/x-mod +#audio/x-tracker-module + +#0 string UN05 MikMod UNI format module sound data + +0 string Extended\ Module: audio/x-mod +#audio/x-tracker-module +##>17 string >\0 Title: "%s" + +21 string/c \!SCREAM! audio/x-mod +#audio/x-screamtracker-module +21 string BMOD2STM audio/x-mod +#audio/x-screamtracker-module +1080 string M.K. audio/x-mod +#audio/x-protracker-module +#>0 string >\0 Title: "%s" +1080 string M!K! audio/x-mod +#audio/x-protracker-module +#>0 string >\0 Title: "%s" +1080 string FLT4 audio/x-mod +#audio/x-startracker-module +#>0 string >\0 Title: "%s" +1080 string FLT8 audio/x-mod +#audio/x-startracker-module +#>0 string >\0 Title: "%s" +1080 string 4CHN audio/x-mod +#audio/x-fasttracker-module +#>0 string >\0 Title: "%s" +1080 string 6CHN audio/x-mod +#audio/x-fasttracker-module +#>0 string >\0 Title: "%s" +1080 string 8CHN audio/x-mod +#audio/x-fasttracker-module +#>0 string >\0 Title: "%s" +1080 string CD81 audio/x-mod +#audio/x-oktalyzer-tracker-module +#>0 string >\0 Title: "%s" +1080 string OKTA audio/x-mod +#audio/x-oktalyzer-tracker-module +#>0 string >\0 Title: "%s" +# Not good enough. +#1082 string CH +#>1080 string >/0 %.2s-channel Fasttracker "oktalyzer" module sound data +1080 string 16CN audio/x-mod +#audio/x-taketracker-module +#>0 string >\0 Title: "%s" +1080 string 32CN audio/x-mod +#audio/x-taketracker-module +#>0 string >\0 Title: "%s" + +# Impuse tracker module (it) +0 string IMPM audio/x-mod +#>4 string >\0 "%s" +#>40 leshort !0 compatible w/ITv%x +#>42 leshort !0 created w/ITv%x + +#------------------------------------------------------------------------------ +# end local stuff +#------------------------------------------------------------------------------ + +# xml based formats! + +# svg + +0 string \38 string \<\!DOCTYPE\040svg image/svg+xml + + +# xml +0 string \2 short 0xbabe application/java + +#------------------------------------------------------------------------------ +# audio: file(1) magic for sound formats +# +# from Jan Nicolai Langfeldt , +# + +# Sun/NeXT audio data +0 string .snd +>12 belong 1 audio/basic +>12 belong 2 audio/basic +>12 belong 3 audio/basic +>12 belong 4 audio/basic +>12 belong 5 audio/basic +>12 belong 6 audio/basic +>12 belong 7 audio/basic + +>12 belong 23 audio/x-adpcm + +# DEC systems (e.g. DECstation 5000) use a variant of the Sun/NeXT format +# that uses little-endian encoding and has a different magic number +# (0x0064732E in little-endian encoding). +0 lelong 0x0064732E +>12 lelong 1 audio/x-dec-basic +>12 lelong 2 audio/x-dec-basic +>12 lelong 3 audio/x-dec-basic +>12 lelong 4 audio/x-dec-basic +>12 lelong 5 audio/x-dec-basic +>12 lelong 6 audio/x-dec-basic +>12 lelong 7 audio/x-dec-basic +# compressed (G.721 ADPCM) +>12 lelong 23 audio/x-dec-adpcm + +# Bytes 0-3 of AIFF, AIFF-C, & 8SVX audio files are "FORM" +# AIFF audio data +8 string AIFF audio/x-aiff +# AIFF-C audio data +8 string AIFC audio/x-aiff +# IFF/8SVX audio data +8 string 8SVX audio/x-aiff + + + +# Creative Labs AUDIO stuff +# Standard MIDI data +0 string MThd audio/unknown +#>9 byte >0 (format %d) +#>11 byte >1 using %d channels +# Creative Music (CMF) data +0 string CTMF audio/unknown +# SoundBlaster instrument data +0 string SBI audio/unknown +# Creative Labs voice data +0 string Creative\ Voice\ File audio/unknown +## is this next line right? it came this way... +#>19 byte 0x1A +#>23 byte >0 - version %d +#>22 byte >0 \b.%d + +# [GRR 950115: is this also Creative Labs? Guessing that first line +# should be string instead of unknown-endian long...] +#0 long 0x4e54524b MultiTrack sound data +#0 string NTRK MultiTrack sound data +#>4 long x - version %ld + +# Microsoft WAVE format (*.wav) +# [GRR 950115: probably all of the shorts and longs should be leshort/lelong] +# Microsoft RIFF +0 string RIFF +# - WAVE format +>8 string WAVE audio/x-wav +>8 string/B AVI video/x-msvideo +# +>8 string CDRA image/x-coreldraw + +# AAC (aka MPEG-2 NBC) +0 beshort&0xfff6 0xfff0 audio/X-HX-AAC-ADTS +0 string ADIF audio/X-HX-AAC-ADIF +0 beshort&0xffe0 0x56e0 audio/MP4A-LATM +0 beshort 0x4De1 audio/MP4A-LATM + +# MPEG Layer 3 sound files +0 beshort&0xfffe =0xfffa audio/mpeg +#MP3 with ID3 tag +0 string ID3 audio/mpeg +# Ogg/Vorbis +0 string OggS application/ogg + +#------------------------------------------------------------------------------ +# c-lang: file(1) magic for C programs or various scripts +# + +# XPM icons (Greg Roelofs, newt@uchicago.edu) +# ideally should go into "images", but entries below would tag XPM as C source +0 string /*\ XPM image/x-xpmi 7bit + +# 3DS (3d Studio files) +#16 beshort 0x3d3d image/x-3ds + +# this first will upset you if you're a PL/1 shop... (are there any left?) +# in which case rm it; ascmagic will catch real C programs +# C or REXX program text +#0 string /* text/x-c +# C++ program text +#0 string // text/x-c++ + +#------------------------------------------------------------------------------ +# commands: file(1) magic for various shells and interpreters +# +#0 string :\ shell archive or commands for antique kernel text +0 string #!/bin/sh application/x-shellscript +0 string #!\ /bin/sh application/x-shellscript +0 string #!/bin/csh application/x-shellscript +0 string #!\ /bin/csh application/x-shellscript +# korn shell magic, sent by George Wu, gwu@clyde.att.com +0 string #!/bin/ksh application/x-shellscript +0 string #!\ /bin/ksh application/x-shellscript +0 string #!/bin/tcsh application/x-shellscript +0 string #!\ /bin/tcsh application/x-shellscript +0 string #!/usr/local/tcsh application/x-shellscript +0 string #!\ /usr/local/tcsh application/x-shellscript +0 string #!/usr/local/bin/tcsh application/x-shellscript +0 string #!\ /usr/local/bin/tcsh application/x-shellscript +# bash shell magic, from Peter Tobias (tobias@server.et-inf.fho-emden.de) +0 string #!/bin/bash application/x-shellscript +0 string #!\ /bin/bash application/x-shellscript +0 string #!/usr/local/bin/bash application/x-shellscript +0 string #!\ /usr/local/bin/bash application/x-shellscript + +# +# zsh/ash/ae/nawk/gawk magic from cameron@cs.unsw.oz.au (Cameron Simpson) +0 string #!/bin/zsh application/x-shellscript +0 string #!/usr/bin/zsh application/x-shellscript +0 string #!/usr/local/bin/zsh application/x-shellscript +0 string #!\ /usr/local/bin/zsh application/x-shellscript +0 string #!/usr/local/bin/ash application/x-shellscript +0 string #!\ /usr/local/bin/ash application/x-shellscript +#0 string #!/usr/local/bin/ae Neil Brown's ae +#0 string #!\ /usr/local/bin/ae Neil Brown's ae +0 string #!/bin/nawk application/x-nawk +0 string #!\ /bin/nawk application/x-nawk +0 string #!/usr/bin/nawk application/x-nawk +0 string #!\ /usr/bin/nawk application/x-nawk +0 string #!/usr/local/bin/nawk application/x-nawk +0 string #!\ /usr/local/bin/nawk application/x-nawk +0 string #!/bin/gawk application/x-gawk +0 string #!\ /bin/gawk application/x-gawk +0 string #!/usr/bin/gawk application/x-gawk +0 string #!\ /usr/bin/gawk application/x-gawk +0 string #!/usr/local/bin/gawk application/x-gawk +0 string #!\ /usr/local/bin/gawk application/x-gawk +# +0 string #!/bin/awk application/x-awk +0 string #!\ /bin/awk application/x-awk +0 string #!/usr/bin/awk application/x-awk +0 string #!\ /usr/bin/awk application/x-awk +# update to distinguish from *.vcf files by Joerg Jenderek: joerg dot jenderek at web dot de +#0 regex BEGIN[[:space:]]*[{] application/x-awk + +# For Larry Wall's perl language. The ``eval'' line recognizes an +# outrageously clever hack for USG systems. +# Keith Waclena +0 string #!/bin/perl application/x-perl +0 string #!\ /bin/perl application/x-perl +0 string eval\ "exec\ /bin/perl application/x-perl +0 string #!/usr/bin/perl application/x-perl +0 string #!\ /usr/bin/perl application/x-perl +0 string eval\ "exec\ /usr/bin/perl application/x-perl +0 string #!/usr/local/bin/perl application/x-perl +0 string #!\ /usr/local/bin/perl application/x-perl +0 string eval\ "exec\ /usr/local/bin/perl application/x-perl + +#------------------------------------------------------------------------------ +# compress: file(1) magic for pure-compression formats (no archives) +# +# compress, gzip, pack, compact, huf, squeeze, crunch, freeze, yabba, whap, etc. +# +# Formats for various forms of compressed data +# Formats for "compress" proper have been moved into "compress.c", +# because it tries to uncompress it to figure out what's inside. + +# standard unix compress +#0 string \037\235 application/x-compress + +# gzip (GNU zip, not to be confused with [Info-ZIP/PKWARE] zip archiver) +#0 string \037\213 application/x-gzip + +0 string PK\003\004 application/x-zip + +# RAR archiver (Greg Roelofs, newt@uchicago.edu) +0 string Rar! application/x-rar + +# According to gzip.h, this is the correct byte order for packed data. +0 string \037\036 application/octet-stream +# +# This magic number is byte-order-independent. +# +0 short 017437 application/octet-stream + +# XXX - why *two* entries for "compacted data", one of which is +# byte-order independent, and one of which is byte-order dependent? +# +# compacted data +0 short 0x1fff application/octet-stream +0 string \377\037 application/octet-stream +# huf output +0 short 0145405 application/octet-stream + +# Squeeze and Crunch... +# These numbers were gleaned from the Unix versions of the programs to +# handle these formats. Note that I can only uncrunch, not crunch, and +# I didn't have a crunched file handy, so the crunch number is untested. +# Keith Waclena +#0 leshort 0x76FF squeezed data (CP/M, DOS) +#0 leshort 0x76FE crunched data (CP/M, DOS) + +# Freeze +#0 string \037\237 Frozen file 2.1 +#0 string \037\236 Frozen file 1.0 (or gzip 0.5) + +# lzh? +#0 string \037\240 LZH compressed data + +257 string ustar\0 application/x-tar posix +257 string ustar\040\040\0 application/x-tar gnu + +0 short 070707 application/x-cpio +0 short 0143561 application/x-cpio swapped + +0 string = application/x-archive +0 string \! application/x-archive +>8 string debian application/x-debian-package + +#------------------------------------------------------------------------------ +# +# RPM: file(1) magic for Red Hat Packages Erik Troan (ewt@redhat.com) +# +0 beshort 0xedab +>2 beshort 0xeedb application/x-rpm + +0 lelong&0x8080ffff 0x0000081a application/x-arc lzw +0 lelong&0x8080ffff 0x0000091a application/x-arc squashed +0 lelong&0x8080ffff 0x0000021a application/x-arc uncompressed +0 lelong&0x8080ffff 0x0000031a application/x-arc packed +0 lelong&0x8080ffff 0x0000041a application/x-arc squeezed +0 lelong&0x8080ffff 0x0000061a application/x-arc crunched + +0 leshort 0xea60 application/x-arj + +# LHARC/LHA archiver (Greg Roelofs, newt@uchicago.edu) +2 string -lh0- application/x-lharc lh0 +2 string -lh1- application/x-lharc lh1 +2 string -lz4- application/x-lharc lz4 +2 string -lz5- application/x-lharc lz5 +# [never seen any but the last; -lh4- reported in comp.compression:] +2 string -lzs- application/x-lha lzs +2 string -lh\ - application/x-lha lh +2 string -lhd- application/x-lha lhd +2 string -lh2- application/x-lha lh2 +2 string -lh3- application/x-lha lh3 +2 string -lh4- application/x-lha lh4 +2 string -lh5- application/x-lha lh5 +2 string -lh6- application/x-lha lh6 +2 string -lh7- application/x-lha lh7 +# Shell archives +10 string #\ This\ is\ a\ shell\ archive application/octet-stream x-shell + +#------------------------------------------------------------------------------ +# frame: file(1) magic for FrameMaker files +# +# This stuff came on a FrameMaker demo tape, most of which is +# copyright, but this file is "published" as witness the following: +# +0 string \ +# +0 string/cB \14 byte 12 (OS/2 1.x format) +#>14 byte 64 (OS/2 2.x format) +#>14 byte 40 (Windows 3.x format) +#0 string IC icon +#0 string PI pointer +#0 string CI color icon +#0 string CP color pointer +#0 string BA bitmap array + +# CDROM Filesystems +32769 string CD001 application/x-iso9660 + +# Newer StuffIt archives (grant@netbsd.org) +0 string StuffIt application/x-stuffit +#>162 string >0 : %s + +# BinHex is the Macintosh ASCII-encoded file format (see also "apple") +# Daniel Quinlan, quinlan@yggdrasil.com +11 string must\ be\ converted\ with\ BinHex\ 4 application/mac-binhex40 +##>41 string x \b, version %.3s + + +#------------------------------------------------------------------------------ +# lisp: file(1) magic for lisp programs +# +# various lisp types, from Daniel Quinlan (quinlan@yggdrasil.com) +0 string ;; text/plain 8bit +# Emacs 18 - this is always correct, but not very magical. +0 string \012( application/x-elc +# Emacs 19 +0 string ;ELC\023\000\000\000 application/x-elc + +#------------------------------------------------------------------------------ +# mail.news: file(1) magic for mail and news +# +# There are tests to ascmagic.c to cope with mail and news. +0 string Relay-Version: message/rfc822 7bit +0 string #!\ rnews message/rfc822 7bit +0 string N#!\ rnews message/rfc822 7bit +0 string Forward\ to message/rfc822 7bit +0 string Pipe\ to message/rfc822 7bit +0 string Return-Path: message/rfc822 7bit +0 string Received: message/rfc822 +0 string Path: message/news 8bit +0 string Xref: message/news 8bit +0 string From: message/rfc822 7bit +0 string Article message/news 8bit +#------------------------------------------------------------------------------ +# msword: file(1) magic for MS Word files +# +# Contributor claims: +# Reversed-engineered MS Word magic numbers +# + +0 string \376\067\0\043 application/msword +0 string \320\317\021\340\241\261 application/msword +0 string \333\245-\0\0\0 application/msword + + + +#------------------------------------------------------------------------------ +# printer: file(1) magic for printer-formatted files +# + +# PostScript +0 string %! application/postscript +0 string \004%! application/postscript + +# Acrobat +# (due to clamen@cs.cmu.edu) +0 string %PDF- application/pdf + +#------------------------------------------------------------------------------ +# sc: file(1) magic for "sc" spreadsheet +# +38 string Spreadsheet application/x-sc + +#------------------------------------------------------------------------------ +# tex: file(1) magic for TeX files +# +# XXX - needs byte-endian stuff (big-endian and little-endian DVI?) +# +# From + +# Although we may know the offset of certain text fields in TeX DVI +# and font files, we can't use them reliably because they are not +# zero terminated. [but we do anyway, christos] +0 string \367\002 application/x-dvi +#0 string \367\203 TeX generic font data +#0 string \367\131 TeX packed font data +#0 string \367\312 TeX virtual font data +#0 string This\ is\ TeX, TeX transcript text +#0 string This\ is\ METAFONT, METAFONT transcript text + +# There is no way to detect TeX Font Metric (*.tfm) files without +# breaking them apart and reading the data. The following patterns +# match most *.tfm files generated by METAFONT or afm2tfm. +2 string \000\021 application/x-tex-tfm +2 string \000\022 application/x-tex-tfm +#>34 string >\0 (%s) + +# Texinfo and GNU Info, from Daniel Quinlan (quinlan@yggdrasil.com) +0 string \\input\ texinfo text/x-texinfo +0 string This\ is\ Info\ file text/x-info + +# correct TeX magic for Linux (and maybe more) +# from Peter Tobias (tobias@server.et-inf.fho-emden.de) +# +0 leshort 0x02f7 application/x-dvi + +# RTF - Rich Text Format +0 string {\\rtf text/rtf + +#------------------------------------------------------------------------------ +# animation: file(1) magic for animation/movie formats +# +# animation formats, originally from vax@ccwf.cc.utexas.edu (VaX#n8) +# MPEG file +# MPEG sequences +0 belong 0x000001BA +>4 byte &0x40 video/mp2p +>4 byte ^0x40 video/mpeg +0 belong 0x000001BB video/mpeg +0 belong 0x000001B0 video/mp4v-es +0 belong 0x000001B5 video/mp4v-es +0 belong 0x000001B3 video/mpv +0 belong&0xFF5FFF1F 0x47400010 video/mp2t +0 belong 0x00000001 +>4 byte&0x1F 0x07 video/h264 + +# FLI animation format +0 leshort 0xAF11 video/fli +# FLC animation format +0 leshort 0xAF12 video/flc +# +# SGI and Apple formats +# Added ISO mimes +0 string MOVI video/sgi +4 string moov video/quicktime +4 string mdat video/quicktime +4 string wide video/quicktime +4 string skip video/quicktime +4 string free video/quicktime +4 string idsc image/x-quicktime +4 string idat image/x-quicktime +4 string pckg application/x-quicktime +4 string/B jP image/jp2 +4 string ftyp +>8 string isom video/mp4 +>8 string mp41 video/mp4 +>8 string mp42 video/mp4 +>8 string/B jp2 image/jp2 +>8 string 3gp video/3gpp +>8 string avc1 video/3gpp +>8 string mmp4 video/mp4 +>8 string/B M4A audio/mp4 +>8 string/B qt video/quicktime +# The contributor claims: +# I couldn't find a real magic number for these, however, this +# -appears- to work. Note that it might catch other files, too, +# so BE CAREFUL! +# +# Note that title and author appear in the two 20-byte chunks +# at decimal offsets 2 and 22, respectively, but they are XOR'ed with +# 255 (hex FF)! DL format SUCKS BIG ROCKS. +# +# DL file version 1 , medium format (160x100, 4 images/screen) +0 byte 1 video/unknown +0 byte 2 video/unknown +# +# Databases +# +# GDBM magic numbers +# Will be maintained as part of the GDBM distribution in the future. +# +0 belong 0x13579ace application/x-gdbm +0 lelong 0x13579ace application/x-gdbm +0 string GDBM application/x-gdbm +# +0 belong 0x061561 application/x-dbm +# +# Executables +# +0 string \177ELF +>16 leshort 0 application/octet-stream +>16 leshort 1 application/x-object +>16 leshort 2 application/x-executable +>16 leshort 3 application/x-sharedlib +>16 leshort 4 application/x-coredump +>16 beshort 0 application/octet-stream +>16 beshort 1 application/x-object +>16 beshort 2 application/x-executable +>16 beshort 3 application/x-sharedlib +>16 beshort 4 application/x-coredump +# +# DOS +0 string MZ application/x-dosexec +# +# KDE +0 string [KDE\ Desktop\ Entry] application/x-kdelnk +0 string \#\ KDE\ Config\ File application/x-kdelnk +# xmcd database file for kscd +0 string \#\ xmcd text/xmcd + +#------------------------------------------------------------------------------ +# pkgadd: file(1) magic for SysV R4 PKG Datastreams +# +0 string #\ PaCkAgE\ DaTaStReAm application/x-svr4-package + +#PNG Image Format +0 string \x89PNG image/png + +# MNG Video Format, +0 string \x8aMNG video/x-mng +0 string \x8aJNG video/x-jng + +#------------------------------------------------------------------------------ +# Hierarchical Data Format, used to facilitate scientific data exchange +# specifications at http://hdf.ncsa.uiuc.edu/ +#Hierarchical Data Format (version 4) data +0 belong 0x0e031301 application/x-hdf +#Hierarchical Data Format (version 5) data +0 string \211HDF\r\n\032 application/x-hdf + +# Adobe Photoshop +0 string 8BPS image/x-photoshop + +# Felix von Leitner +0 string d8:announce application/x-bittorrent + + +# lotus 1-2-3 document +0 belong 0x00001a00 application/x-123 +0 belong 0x00000200 application/x-123 + +# MS Access database +4 string Standard\ Jet\ DB application/msaccess + +## magic for XBase files +#0 byte 0x02 +#>8 leshort >0 +#>>12 leshort 0 application/x-dbf +# +#0 byte 0x03 +#>8 leshort >0 +#>>12 leshort 0 application/x-dbf +# +#0 byte 0x04 +#>8 leshort >0 +#>>12 leshort 0 application/x-dbf +# +#0 byte 0x05 +#>8 leshort >0 +#>>12 leshort 0 application/x-dbf +# +#0 byte 0x30 +#>8 leshort >0 +#>>12 leshort 0 application/x-dbf +# +#0 byte 0x43 +#>8 leshort >0 +#>>12 leshort 0 application/x-dbf +# +#0 byte 0x7b +#>8 leshort >0 +#>>12 leshort 0 application/x-dbf +# +#0 byte 0x83 +#>8 leshort >0 +#>>12 leshort 0 application/x-dbf +# +#0 byte 0x8b +#>8 leshort >0 +#>>12 leshort 0 application/x-dbf +# +#0 byte 0x8e +#>8 leshort >0 +#>>12 leshort 0 application/x-dbf +# +#0 byte 0xb3 +#>8 leshort >0 +#>>12 leshort 0 application/x-dbf +# +#0 byte 0xf5 +#>8 leshort >0 +#>>12 leshort 0 application/x-dbf +# +#0 leshort 0x0006 application/x-dbt + +# Debian has entries for the old PGP formats: +# pgp: file(1) magic for Pretty Good Privacy +# see http://lists.gnupg.org/pipermail/gnupg-devel/1999-September/016052.html +#text/PGP key public ring +0 beshort 0x9900 application/pgp +#text/PGP key security ring +0 beshort 0x9501 application/pgp +#text/PGP key security ring +0 beshort 0x9500 application/pgp +#text/PGP encrypted data +0 beshort 0xa600 application/pgp-encrypted +#text/PGP armored data +##public key block +2 string ---BEGIN\ PGP\ PUBLIC\ KEY\ BLOCK- application/pgp-keys +0 string -----BEGIN\040PGP\40MESSAGE- application/pgp +0 string -----BEGIN\040PGP\40SIGNATURE- application/pgp-signature +# +# GnuPG Magic: +# +# +#text/GnuPG key public ring +0 beshort 0x9901 application/pgp +#text/OpenPGP data +0 beshort 0x8501 application/pgp-encrypted + +# flash: file(1) magic for Macromedia Flash file format +# +# See +# +# http://www.macromedia.com/software/flash/open/ +# +0 string FWS +>3 byte x application/x-shockwave-flash + +# The following paramaters are created for Namazu. +# +# +# 1999/08/13 +#0 string \ + + + + + + + + + + + + + diff --git a/debconf.conf b/debconf.conf new file mode 100644 index 0000000..549c1d5 --- /dev/null +++ b/debconf.conf @@ -0,0 +1,83 @@ +# This is the main config file for debconf. It tells debconf where to +# store data. The format of this file is a set of stanzas. Each stanza +# except the first sets up a database for debconf to use. For details, see +# debconf.conf(5) (in the debconf-doc package). +# +# So first things first. This first stanza gives the names of two databases. + +# Debconf will use this database to store the data you enter into it, +# and some other dynamic data. +Config: configdb +# Debconf will use this database to store static template data. +Templates: templatedb + +# World-readable, and accepts everything but passwords. +Name: config +Driver: File +Mode: 644 +Reject-Type: password +Filename: /var/cache/debconf/config.dat + +# Not world readable (the default), and accepts only passwords. +Name: passwords +Driver: File +Mode: 600 +Backup: false +Required: false +Accept-Type: password +Filename: /var/cache/debconf/passwords.dat + +# Set up the configdb database. By default, it consists of a stack of two +# databases, one to hold passwords and one for everything else. +Name: configdb +Driver: Stack +Stack: config, passwords + +# Set up the templatedb database, which is a single flat text file +# by default. +Name: templatedb +Driver: File +Mode: 644 +Filename: /var/cache/debconf/templates.dat + +# Well that was pretty straightforward, and it will be enough for most +# people's needs, but debconf's database drivers can be used to do much +# more interesting things. For example, suppose you want to use config +# data from another host, which is mounted over nfs or perhaps the database +# is accessed via LDAP. You don't want to write to the remote debconf database, +# just read from it, so you still need a local database for local changes. +# +# A remote NFS mounted database, read-only. It is optional; if debconf +# fails to use it it will not abort. +#Name: remotedb +#Driver: DirTree +#Directory: /mnt/otherhost/var/cache/debconf/config +#Readonly: true +#Required: false +# +# A remote LDAP database. It is also read-only. The password is really +# only necessary if the database is not accessible anonymously. +# Option KeyByKey instructs the backend to retrieve keys from the LDAP +# server individually (when they are requested), instead of loading all +# keys at startup. The default is 0, and should only be enabled if you +# want to track accesses to individual keys on the LDAP server side. +#Name: remotedb +#Driver: LDAP +#Server: remotehost +#BaseDN: cn=debconf,dc=domain,dc=com +#BindDN: uid=admin,dc=domain,dc=com +#BindPasswd: secret +#KeyByKey: 0 +# +# A stack consisting of two databases. Values will be read from +# the first database in the stack to contain a value. In this example, +# writes always go to the first database. +#Name: fulldb +#Driver: Stack +#Stack: configdb, remotedb +# +# In this example, we'd use Config: fulldb at the top of the file +# to make it use the combination of the databases. +# +# Even more complex and interesting setups are possible, see the +# debconf.conf(5) page for details. diff --git a/debian_version b/debian_version new file mode 100644 index 0000000..2834e58 --- /dev/null +++ b/debian_version @@ -0,0 +1 @@ +buster/sid diff --git a/default/acpid b/default/acpid new file mode 100644 index 0000000..c651a78 --- /dev/null +++ b/default/acpid @@ -0,0 +1,11 @@ +# Options to pass to acpid +# +# OPTIONS are appended to the acpid command-line +#OPTIONS="" + +# Linux kernel modules to load before starting acpid +# +# MODULES is a space separated list of modules to load, or "all" to load all +# acpi drivers, or commented out to load no module +#MODULES="battery ac processor button fan thermal video" +#MODULES="all" diff --git a/default/amd64-microcode b/default/amd64-microcode new file mode 100644 index 0000000..7254c01 --- /dev/null +++ b/default/amd64-microcode @@ -0,0 +1,13 @@ +# Configuration script for amd64-microcode version 3 + +# +# initramfs helper +# + +# +# Set this to "no" to disable automatic microcode updates on boot; +# Set this to "early" to always install microcode updates to the early initramfs +# Set this to "auto" to autodetect mode for current system (default); +# +#AMD64UCODE_INITRAMFS=auto + diff --git a/default/apache-htcacheclean b/default/apache-htcacheclean new file mode 100644 index 0000000..73637fc --- /dev/null +++ b/default/apache-htcacheclean @@ -0,0 +1,22 @@ +# This file must only contain KEY=VALUE lines. Do not use advanced +# shell script constructs! + +## run mode: cron, daemon +## run in daemon mode or as daily cron job +## default: daemon +HTCACHECLEAN_MODE=daemon + +## cache size +HTCACHECLEAN_SIZE=300M + +## interval: if in daemon mode, clean cache every x minutes +HTCACHECLEAN_DAEMON_INTERVAL=120 + +## path to cache +## must be the same as in CacheRoot directive +#HTCACHECLEAN_PATH=/var/cache/apache2/mod_cache_disk + +## additional options: +## -n : be nice +## -t : remove empty directories +HTCACHECLEAN_OPTIONS="-n" diff --git a/default/bind9 b/default/bind9 new file mode 100644 index 0000000..66352f0 --- /dev/null +++ b/default/bind9 @@ -0,0 +1,6 @@ +# +# run resolvconf? +RESOLVCONF=no + +# startup options for the server +OPTIONS="-u bind" diff --git a/default/bsdmainutils b/default/bsdmainutils new file mode 100644 index 0000000..e4ac054 --- /dev/null +++ b/default/bsdmainutils @@ -0,0 +1,4 @@ +# Uncomment the following line if you'd like all of your users' +# ~/calendar files to be checked daily. Calendar will send them mail +# to remind them of upcoming events. See calendar(1) for more details. +#RUN_DAILY=true diff --git a/default/console-setup b/default/console-setup new file mode 100644 index 0000000..418f135 --- /dev/null +++ b/default/console-setup @@ -0,0 +1,16 @@ +# CONFIGURATION FILE FOR SETUPCON + +# Consult the console-setup(5) manual page. + +ACTIVE_CONSOLES="/dev/tty[1-6]" + +CHARMAP="UTF-8" + +CODESET="guess" +FONTFACE="Fixed" +FONTSIZE="8x16" + +VIDEOMODE= + +# The following is an example how to use a braille font +# FONT='lat9w-08.psf.gz brl-8x8.psf' diff --git a/default/crda b/default/crda new file mode 100644 index 0000000..36b62bd --- /dev/null +++ b/default/crda @@ -0,0 +1,11 @@ +# Set REGDOMAIN to a ISO/IEC 3166-1 alpha2 country code so that iw(8) may set +# the initial regulatory domain setting for IEEE 802.11 devices which operate +# on this system. +# +# Governments assert the right to regulate usage of radio spectrum within +# their respective territories so make sure you select a ISO/IEC 3166-1 alpha2 +# country code suitable for your location or you may infringe on local +# legislature. See `/usr/share/zoneinfo/zone.tab' for a table of timezone +# descriptions containing ISO/IEC 3166-1 alpha2 country codes. + +REGDOMAIN= diff --git a/default/cron b/default/cron new file mode 100644 index 0000000..bba2e52 --- /dev/null +++ b/default/cron @@ -0,0 +1,4 @@ +# This file has been deprecated. Please add custom options for cron using +# $ systemctl edit cron.service +# or +# $ systemctl edit --full cron.service diff --git a/default/dbus b/default/dbus new file mode 100644 index 0000000..4bc8e1b --- /dev/null +++ b/default/dbus @@ -0,0 +1,7 @@ +# This is a configuration file for /etc/init.d/dbus; it allows you to +# perform common modifications to the behavior of the dbus daemon +# startup without editing the init script (and thus getting prompted +# by dpkg on upgrades). We all love dpkg prompts. + +# Parameters to pass to dbus. +PARAMS="" diff --git a/default/grub b/default/grub new file mode 100644 index 0000000..54e73c9 --- /dev/null +++ b/default/grub @@ -0,0 +1,33 @@ +# If you change this file, run 'update-grub' afterwards to update +# /boot/grub/grub.cfg. +# For full documentation of the options in this file, see: +# info -f grub -n 'Simple configuration' + +GRUB_DEFAULT=0 +GRUB_TIMEOUT_STYLE=hidden +GRUB_TIMEOUT=0 +GRUB_DISTRIBUTOR=`lsb_release -i -s 2> /dev/null || echo Debian` +GRUB_CMDLINE_LINUX_DEFAULT="nomodeset" +GRUB_CMDLINE_LINUX="" + +# Uncomment to enable BadRAM filtering, modify to suit your needs +# This works with Linux (no patch required) and with any kernel that obtains +# the memory map information from GRUB (GNU Mach, kernel of FreeBSD ...) +#GRUB_BADRAM="0x01234567,0xfefefefe,0x89abcdef,0xefefefef" + +# Uncomment to disable graphical terminal (grub-pc only) +#GRUB_TERMINAL=console + +# The resolution used on graphical terminal +# note that you can use only modes which your graphic card supports via VBE +# you can see them in real GRUB with the command `vbeinfo' +#GRUB_GFXMODE=640x480 + +# Uncomment if you don't want GRUB to pass "root=UUID=xxx" parameter to Linux +#GRUB_DISABLE_LINUX_UUID=true + +# Uncomment to disable generation of recovery mode menu entries +#GRUB_DISABLE_RECOVERY="true" + +# Uncomment to get a beep at grub start +#GRUB_INIT_TUNE="480 440 1" diff --git a/default/intel-microcode b/default/intel-microcode new file mode 100644 index 0000000..b958464 --- /dev/null +++ b/default/intel-microcode @@ -0,0 +1,26 @@ +# Configuration script for intel-microcode version 3 + +# +# initramfs helper +# + +# Set this to "no" to disable automatic microcode updates on boot; +# Set this to "auto" to use early initramfs mode automatically (default); +# Set this to "early" to always attempt to create an early initramfs; +#IUCODE_TOOL_INITRAMFS=auto + +# Set this to "yes" (default) to use "iucode_tool --scan-system" to reduce +# the initramfs size bloat, by detecting which Intel processors are active +# in this system, and installing only their microcodes. +# +# Set this to "no" to either include all microcodes, or only the microcodes +# selected through the use of IUCODE_TOOL_EXTRA_OPTIONS below. +# +# WARNING: including all microcodes will increase initramfs size greatly. +# This can cause boot issues if the initramfs is already large. +#IUCODE_TOOL_SCANCPUS=yes + +# Extra options to pass to iucode_tool, useful to forbid or to +# force the inclusion of microcode for specific processor signatures. +# See iucode_tool(8) for details. +#IUCODE_TOOL_EXTRA_OPTIONS="" diff --git a/default/irqbalance b/default/irqbalance new file mode 100644 index 0000000..bd87e3d --- /dev/null +++ b/default/irqbalance @@ -0,0 +1,26 @@ +# irqbalance is a daemon process that distributes interrupts across +# CPUS on SMP systems. The default is to rebalance once every 10 +# seconds. This is the environment file that is specified to systemd via the +# EnvironmentFile key in the service unit file (or via whatever method the init +# system you're using has. +# +# ONESHOT=yes +# after starting, wait for a minute, then look at the interrupt +# load and balance it once; after balancing exit and do not change +# it again. +#IRQBALANCE_ONESHOT= + +# +# IRQBALANCE_BANNED_CPUS +# 64 bit bitmask which allows you to indicate which cpu's should +# be skipped when reblancing irqs. Cpu numbers which have their +# corresponding bits set to one in this mask will not have any +# irq's assigned to them on rebalance +# +#IRQBALANCE_BANNED_CPUS= + +# +# IRQBALANCE_ARGS +# append any args here to the irqbalance daemon as documented in the man page +# +#IRQBALANCE_ARGS= diff --git a/default/keyboard b/default/keyboard new file mode 100644 index 0000000..3fecbcc --- /dev/null +++ b/default/keyboard @@ -0,0 +1,10 @@ +# KEYBOARD CONFIGURATION FILE + +# Consult the keyboard(5) manual page. + +XKBMODEL="pc105" +XKBLAYOUT="us" +XKBVARIANT="" +XKBOPTIONS="" + +BACKSPACE="guess" diff --git a/default/locale b/default/locale new file mode 100644 index 0000000..4f516c5 --- /dev/null +++ b/default/locale @@ -0,0 +1,3 @@ +# File generated by update-locale +LANG="en_US.UTF-8" +LANGUAGE="en_US:" diff --git a/default/motd-news b/default/motd-news new file mode 100644 index 0000000..434e562 --- /dev/null +++ b/default/motd-news @@ -0,0 +1,19 @@ +# Enable/disable the dynamic MOTD news service +# This is a useful way to provide dynamic, informative +# information pertinent to the users and administrators +# of the local system +ENABLED=1 + +# Configure the source of dynamic MOTD news +# White space separated list of 0 to many news services +# For security reasons, these must be https +# and have a valid certificate +# Canonical runs a service at motd.ubuntu.com, and you +# can easily run one too +URLS="https://motd.ubuntu.com" + +# Specify the time in seconds, you're willing to wait for +# dynamic MOTD news +# Note that news messages are fetched in the background by +# a systemd timer, so this should never block boot or login +WAIT=5 diff --git a/default/networkd-dispatcher b/default/networkd-dispatcher new file mode 100644 index 0000000..bc9854c --- /dev/null +++ b/default/networkd-dispatcher @@ -0,0 +1,3 @@ +# Specify command line options here. This config file is used +# by the included systemd service file. +networkd_dispatcher_args="--run-startup-triggers" diff --git a/default/nss b/default/nss new file mode 100644 index 0000000..c43e88b --- /dev/null +++ b/default/nss @@ -0,0 +1,37 @@ +# /etc/default/nss +# This file can theoretically contain a bunch of customization variables +# for Name Service Switch in the GNU C library. For now there are only +# four variables: +# +# NETID_AUTHORITATIVE +# If set to TRUE, the initgroups() function will accept the information +# from the netid.byname NIS map as authoritative. This can speed up the +# function significantly if the group.byname map is large. The content +# of the netid.byname map is used AS IS. The system administrator has +# to make sure it is correctly generated. +#NETID_AUTHORITATIVE=TRUE +# +# SERVICES_AUTHORITATIVE +# If set to TRUE, the getservbyname{,_r}() function will assume +# services.byservicename NIS map exists and is authoritative, particularly +# that it contains both keys with /proto and without /proto for both +# primary service names and service aliases. The system administrator +# has to make sure it is correctly generated. +#SERVICES_AUTHORITATIVE=TRUE +# +# SETENT_BATCH_READ +# If set to TRUE, various setXXent() functions will read the entire +# database at once and then hand out the requests one by one from +# memory with every getXXent() call. Otherwise each getXXent() call +# might result into a network communication with the server to get +# the next entry. +#SETENT_BATCH_READ=TRUE +# +# ADJUNCT_AS_SHADOW +# If set to TRUE, the passwd routines in the NIS NSS module will not +# use the passwd.adjunct.byname tables to fill in the password data +# in the passwd structure. This is a security problem if the NIS +# server cannot be trusted to send the passwd.adjuct table only to +# privileged clients. Instead the passwd.adjunct.byname table is +# used to synthesize the shadow.byname table if it does not exist. +ADJUNCT_AS_SHADOW=TRUE diff --git a/default/rsync b/default/rsync new file mode 100644 index 0000000..424b1c0 --- /dev/null +++ b/default/rsync @@ -0,0 +1,47 @@ +# defaults file for rsync daemon mode +# +# This file is only used for init.d based systems! +# If this system uses systemd, you can specify options etc. for rsync +# in daemon mode by copying /lib/systemd/system/rsync.service to +# /etc/systemd/system/rsync.service and modifying the copy; add required +# options to the ExecStart line. + +# start rsync in daemon mode from init.d script? +# only allowed values are "true", "false", and "inetd" +# Use "inetd" if you want to start the rsyncd from inetd, +# all this does is prevent the init.d script from printing a message +# about not starting rsyncd (you still need to modify inetd's config yourself). +RSYNC_ENABLE=false + +# which file should be used as the configuration file for rsync. +# This file is used instead of the default /etc/rsyncd.conf +# Warning: This option has no effect if the daemon is accessed +# using a remote shell. When using a different file for +# rsync you might want to symlink /etc/rsyncd.conf to +# that file. +# RSYNC_CONFIG_FILE= + +# what extra options to give rsync --daemon? +# that excludes the --daemon; that's always done in the init.d script +# Possibilities are: +# --address=123.45.67.89 (bind to a specific IP address) +# --port=8730 (bind to specified port; default 873) +RSYNC_OPTS='' + +# run rsyncd at a nice level? +# the rsync daemon can impact performance due to much I/O and CPU usage, +# so you may want to run it at a nicer priority than the default priority. +# Allowed values are 0 - 19 inclusive; 10 is a reasonable value. +RSYNC_NICE='' + +# run rsyncd with ionice? +# "ionice" does for IO load what "nice" does for CPU load. +# As rsync is often used for backups which aren't all that time-critical, +# reducing the rsync IO priority will benefit the rest of the system. +# See the manpage for ionice for allowed options. +# -c3 is recommended, this will run rsync IO at "idle" priority. Uncomment +# the next line to activate this. +# RSYNC_IONICE='-c3' + +# Don't forget to create an appropriate config file, +# else the daemon will not start. diff --git a/default/rsyslog b/default/rsyslog new file mode 100644 index 0000000..8ec3ea0 --- /dev/null +++ b/default/rsyslog @@ -0,0 +1,4 @@ +# Options for rsyslogd +# -x disables DNS lookups for remote messages +# See rsyslogd(8) for more details +RSYSLOGD_OPTIONS="" diff --git a/default/ssh b/default/ssh new file mode 100644 index 0000000..3040422 --- /dev/null +++ b/default/ssh @@ -0,0 +1,5 @@ +# Default settings for openssh-server. This file is sourced by /bin/sh from +# /etc/init.d/ssh. + +# Options to pass to sshd +SSHD_OPTS= diff --git a/default/ufw b/default/ufw new file mode 100644 index 0000000..665806f --- /dev/null +++ b/default/ufw @@ -0,0 +1,45 @@ +# /etc/default/ufw +# + +# Set to yes to apply rules to support IPv6 (no means only IPv6 on loopback +# accepted). You will need to 'disable' and then 'enable' the firewall for +# the changes to take affect. +IPV6=yes + +# Set the default input policy to ACCEPT, DROP, or REJECT. Please note that if +# you change this you will most likely want to adjust your rules. +DEFAULT_INPUT_POLICY="DROP" + +# Set the default output policy to ACCEPT, DROP, or REJECT. Please note that if +# you change this you will most likely want to adjust your rules. +DEFAULT_OUTPUT_POLICY="ACCEPT" + +# Set the default forward policy to ACCEPT, DROP or REJECT. Please note that +# if you change this you will most likely want to adjust your rules +DEFAULT_FORWARD_POLICY="DROP" + +# Set the default application policy to ACCEPT, DROP, REJECT or SKIP. Please +# note that setting this to ACCEPT may be a security risk. See 'man ufw' for +# details +DEFAULT_APPLICATION_POLICY="SKIP" + +# By default, ufw only touches its own chains. Set this to 'yes' to have ufw +# manage the built-in chains too. Warning: setting this to 'yes' will break +# non-ufw managed firewall rules +MANAGE_BUILTINS=no + +# +# IPT backend +# +# only enable if using iptables backend +IPT_SYSCTL=/etc/ufw/sysctl.conf + +# Extra connection tracking modules to load. Complete list can be found in +# net/netfilter/Kconfig of your kernel source. Some common modules: +# nf_conntrack_irc, nf_nat_irc: DCC (Direct Client to Client) support +# nf_conntrack_netbios_ns: NetBIOS (samba) client support +# nf_conntrack_pptp, nf_nat_pptp: PPTP over stateful firewall/NAT +# nf_conntrack_ftp, nf_nat_ftp: active FTP support +# nf_conntrack_tftp, nf_nat_tftp: TFTP support (server side) +IPT_MODULES="nf_conntrack_ftp nf_nat_ftp nf_conntrack_netbios_ns" + diff --git a/default/useradd b/default/useradd new file mode 100644 index 0000000..a834fef --- /dev/null +++ b/default/useradd @@ -0,0 +1,37 @@ +# Default values for useradd(8) +# +# The SHELL variable specifies the default login shell on your +# system. +# Similar to DHSELL in adduser. However, we use "sh" here because +# useradd is a low level utility and should be as general +# as possible +SHELL=/bin/sh +# +# The default group for users +# 100=users on Debian systems +# Same as USERS_GID in adduser +# This argument is used when the -n flag is specified. +# The default behavior (when -n and -g are not specified) is to create a +# primary user group with the same name as the user being added to the +# system. +# GROUP=100 +# +# The default home directory. Same as DHOME for adduser +# HOME=/home +# +# The number of days after a password expires until the account +# is permanently disabled +# INACTIVE=-1 +# +# The default expire date +# EXPIRE= +# +# The SKEL variable specifies the directory containing "skeletal" user +# files; in other words, files such as a sample .profile that will be +# copied to the new user's home directory when it is created. +# SKEL=/etc/skel +# +# Defines whether the mail spool should be created while +# creating the account +# CREATE_MAIL_SPOOL=yes + diff --git a/deluser.conf b/deluser.conf new file mode 100644 index 0000000..fff8d81 --- /dev/null +++ b/deluser.conf @@ -0,0 +1,20 @@ +# /etc/deluser.conf: `deluser' configuration. + +# Remove home directory and mail spool when user is removed +REMOVE_HOME = 0 + +# Remove all files on the system owned by the user to be removed +REMOVE_ALL_FILES = 0 + +# Backup files before removing them. This options has only an effect if +# REMOVE_HOME or REMOVE_ALL_FILES is set. +BACKUP = 0 + +# target directory for the backup file +BACKUP_TO = "." + +# delete a group even there are still users in this group +ONLY_IF_EMPTY = 0 + +# exclude these filesystem types when searching for files of a user to backup +EXCLUDE_FSTYPES = "(proc|sysfs|usbfs|devpts|tmpfs|afs)" diff --git a/depmod.d/ubuntu.conf b/depmod.d/ubuntu.conf new file mode 100644 index 0000000..6b1a01d --- /dev/null +++ b/depmod.d/ubuntu.conf @@ -0,0 +1 @@ +search updates ubuntu built-in diff --git a/dhcp/debug b/dhcp/debug new file mode 100644 index 0000000..593e7df --- /dev/null +++ b/dhcp/debug @@ -0,0 +1,38 @@ +# +# The purpose of this script is just to show the variables that are +# available to all the scripts in this directory. All these scripts are +# called from dhclient-script, which exports all the variables shown +# before. If you want to debug a problem with your DHCP setup you can +# enable this script and take a look at /tmp/dhclient-script.debug. + +# To enable this script set the following variable to "yes" +RUN="no" + +if [ "$RUN" = "yes" ]; then + echo "$(date): entering ${1%/*}, dumping variables." \ + >> /tmp/dhclient-script.debug + + # loop over the 4 possible prefixes: (empty), cur_, new_, old_ + for prefix in '' 'cur_' 'new_' 'old_'; do + # loop over the DHCP variables passed to dhclient-script + for basevar in reason interface medium alias_ip_address \ + ip_address host_name network_number subnet_mask \ + broadcast_address routers static_routes \ + rfc3442_classless_static_routes \ + domain_name domain_search domain_name_servers \ + netbios_name_servers netbios_scope \ + ntp_servers \ + ip6_address ip6_prefix ip6_prefixlen \ + dhcp6_domain_search dhcp6_name_servers ; do + var="${prefix}${basevar}" + eval "content=\$$var" + + # show only variables with values set + if [ -n "${content}" ]; then + echo "$var='${content}'" >> /tmp/dhclient-script.debug + fi + done + done + + echo '--------------------------' >> /tmp/dhclient-script.debug +fi diff --git a/dhcp/dhclient-enter-hooks.d/debug b/dhcp/dhclient-enter-hooks.d/debug new file mode 120000 index 0000000..ee34fdc --- /dev/null +++ b/dhcp/dhclient-enter-hooks.d/debug @@ -0,0 +1 @@ +../debug \ No newline at end of file diff --git a/dhcp/dhclient-enter-hooks.d/resolved b/dhcp/dhclient-enter-hooks.d/resolved new file mode 100755 index 0000000..b504f5b --- /dev/null +++ b/dhcp/dhclient-enter-hooks.d/resolved @@ -0,0 +1,72 @@ +# +# Script fragment to make dhclient supply nameserver information to resolvconf +# + +# Tips: +# * Be careful about changing the environment since this is sourced +# * This script fragment uses bash features +# * As of isc-dhcp-client 4.2 the "reason" (for running the script) can be one of the following. +# (Listed on man page:) MEDIUM(0) PREINIT(0) BOUND(M) RENEW(M) REBIND(M) REBOOT(M) EXPIRE(D) FAIL(D) RELEASE(D) STOP(D) NBI(-) TIMEOUT(M) +# (Also used in master script:) ARPCHECK(0), ARPSEND(0) +# (Also used in master script:) PREINIT6(0) BOUND6(M) RENEW6(M) REBIND6(M) DEPREF6(0) EXPIRE6(D) RELEASE6(D) STOP6(D) +# (0) = master script does not run make_resolv_conf +# (M) = master script runs make_resolv_conf +# (D) = master script downs interface +# (-) = master script does nothing with this + +if [ -x /lib/systemd/systemd-resolved ] ; then + # For safety, first undefine the nasty default make_resolv_conf() + make_resolv_conf() { : ; } + case "$reason" in + BOUND|RENEW|REBIND|REBOOT|TIMEOUT|BOUND6|RENEW6|REBIND6) + # Define a resolvconf-compatible m_r_c() function + # It gets run later (or, in the TIMEOUT case, MAY get run later) + make_resolv_conf() { + local statedir + if [ ! "$interface" ] ; then + return + fi + statedir="/run/systemd/resolved.conf.d" + mkdir -p $statedir + if [ -n "$new_domain_name_servers" ] ; then + cat <$statedir/isc-dhcp-v4-$interface.conf +[Resolve] +DNS=$new_domain_name_servers +EOF + if [ -n "$new_domain_name" ] || [ -n "$new_domain_search" ] ; then + cat <>$statedir/isc-dhcp-v4-$interface.conf +Domains=$new_domain_search $new_domain_name +EOF + fi + fi + if [ -n "$new_dhcp6_name_servers" ] ; then + cat <$statedir/isc-dhcp-v6-$interface.conf +[Resolve] +DNS=$new_dhcp6_name_servers +EOF + if [ -n "$new_dhcp6_domain_search" ] ; then + cat <>$statedir/isc-dhcp-v6-$interface.conf +Domains=$new_dhcp6_domain_search +EOF + fi + fi + systemctl try-reload-or-restart systemd-resolved.service + } + ;; + + EXPIRE|FAIL|RELEASE|STOP) + if [ ! "$interface" ] ; then + return + fi + rm -f /run/systemd/resolved.conf.d/isc-dhcp-v4-$interface.conf + systemctl try-reload-or-restart systemd-resolved.service + ;; + EXPIRE6|RELEASE6|STOP6) + if [ ! "$interface" ] ; then + return + fi + rm -f /run/systemd/resolved.conf.d/isc-dhcp-v6-$interface.conf + systemctl try-reload-or-restart systemd-resolved.service + ;; + esac +fi diff --git a/dhcp/dhclient-exit-hooks.d/debug b/dhcp/dhclient-exit-hooks.d/debug new file mode 120000 index 0000000..ee34fdc --- /dev/null +++ b/dhcp/dhclient-exit-hooks.d/debug @@ -0,0 +1 @@ +../debug \ No newline at end of file diff --git a/dhcp/dhclient-exit-hooks.d/rfc3442-classless-routes b/dhcp/dhclient-exit-hooks.d/rfc3442-classless-routes new file mode 100644 index 0000000..1ef7b8a --- /dev/null +++ b/dhcp/dhclient-exit-hooks.d/rfc3442-classless-routes @@ -0,0 +1,78 @@ +# set classless routes based on the format specified in RFC3442 +# e.g.: +# new_rfc3442_classless_static_routes='24 192 168 10 192 168 1 1 8 10 10 17 66 41' +# specifies the routes: +# 192.168.10.0/24 via 192.168.1.1 +# 10.0.0.0/8 via 10.10.17.66.41 + +RUN="yes" + + +if [ "$RUN" = "yes" ]; then + if [ -n "$new_rfc3442_classless_static_routes" ]; then + if [ "$reason" = "BOUND" ] || [ "$reason" = "REBOOT" ]; then + + set -- $new_rfc3442_classless_static_routes + + while [ $# -gt 0 ]; do + net_length=$1 + via_arg='' + + case $net_length in + 32|31|30|29|28|27|26|25) + if [ $# -lt 9 ]; then + return 1 + fi + net_address="${2}.${3}.${4}.${5}" + gateway="${6}.${7}.${8}.${9}" + shift 9 + ;; + 24|23|22|21|20|19|18|17) + if [ $# -lt 8 ]; then + return 1 + fi + net_address="${2}.${3}.${4}.0" + gateway="${5}.${6}.${7}.${8}" + shift 8 + ;; + 16|15|14|13|12|11|10|9) + if [ $# -lt 7 ]; then + return 1 + fi + net_address="${2}.${3}.0.0" + gateway="${4}.${5}.${6}.${7}" + shift 7 + ;; + 8|7|6|5|4|3|2|1) + if [ $# -lt 6 ]; then + return 1 + fi + net_address="${2}.0.0.0" + gateway="${3}.${4}.${5}.${6}" + shift 6 + ;; + 0) # default route + if [ $# -lt 5 ]; then + return 1 + fi + net_address="0.0.0.0" + gateway="${2}.${3}.${4}.${5}" + shift 5 + ;; + *) # error + return 1 + ;; + esac + + # take care of link-local routes + if [ "${gateway}" != '0.0.0.0' ]; then + via_arg="via ${gateway}" + fi + + # set route (ip detects host routes automatically) + ip -4 route add "${net_address}/${net_length}" \ + ${via_arg} dev "${interface}" >/dev/null 2>&1 + done + fi + fi +fi diff --git a/dhcp/dhclient-exit-hooks.d/timesyncd b/dhcp/dhclient-exit-hooks.d/timesyncd new file mode 100644 index 0000000..3cde992 --- /dev/null +++ b/dhcp/dhclient-exit-hooks.d/timesyncd @@ -0,0 +1,42 @@ +TIMESYNCD_CONF=/run/systemd/timesyncd.conf.d/01-dhclient.conf + +timesyncd_servers_setup_remove() { + if [ -e $TIMESYNCD_CONF ]; then + rm -f $TIMESYNCD_CONF + systemctl try-restart systemd-timesyncd.service || true + fi +} + +timesyncd_servers_setup_add() { + if [ ! -d /run/systemd/system ]; then + return + fi + + if [ -e $TIMESYNCD_CONF ] && [ "$new_ntp_servers" = "$old_ntp_servers" ]; then + return + fi + + if [ -z "$new_ntp_servers" ]; then + timesyncd_servers_setup_remove + return + fi + + mkdir -p $(dirname $TIMESYNCD_CONF) + cat < ${TIMESYNCD_CONF}.new +# NTP server entries received from DHCP server +[Time] +NTP=$new_ntp_servers +EOF + mv ${TIMESYNCD_CONF}.new ${TIMESYNCD_CONF} + systemctl try-restart systemd-timesyncd.service || true +} + + +case $reason in + BOUND|RENEW|REBIND|REBOOT) + timesyncd_servers_setup_add + ;; + EXPIRE|FAIL|RELEASE|STOP) + timesyncd_servers_setup_remove + ;; +esac diff --git a/dhcp/dhclient.conf b/dhcp/dhclient.conf new file mode 100644 index 0000000..1e4ec62 --- /dev/null +++ b/dhcp/dhclient.conf @@ -0,0 +1,54 @@ +# Configuration file for /sbin/dhclient. +# +# This is a sample configuration file for dhclient. See dhclient.conf's +# man page for more information about the syntax of this file +# and a more comprehensive list of the parameters understood by +# dhclient. +# +# Normally, if the DHCP server provides reasonable information and does +# not leave anything out (like the domain name, for example), then +# few changes must be made to this file, if any. +# + +option rfc3442-classless-static-routes code 121 = array of unsigned integer 8; + +send host-name = gethostname(); +request subnet-mask, broadcast-address, time-offset, routers, + domain-name, domain-name-servers, domain-search, host-name, + dhcp6.name-servers, dhcp6.domain-search, dhcp6.fqdn, dhcp6.sntp-servers, + netbios-name-servers, netbios-scope, interface-mtu, + rfc3442-classless-static-routes, ntp-servers; + +#send dhcp-client-identifier 1:0:a0:24:ab:fb:9c; +#send dhcp-lease-time 3600; +#supersede domain-name "fugue.com home.vix.com"; +#prepend domain-name-servers 127.0.0.1; +#require subnet-mask, domain-name-servers; +timeout 300; +#retry 60; +#reboot 10; +#select-timeout 5; +#initial-interval 2; +#script "/sbin/dhclient-script"; +#media "-link0 -link1 -link2", "link0 link1"; +#reject 192.33.137.209; + +#alias { +# interface "eth0"; +# fixed-address 192.5.5.213; +# option subnet-mask 255.255.255.255; +#} + +#lease { +# interface "eth0"; +# fixed-address 192.33.137.200; +# medium "link0 link1"; +# option host-name "andare.swiftmedia.com"; +# option subnet-mask 255.255.255.0; +# option broadcast-address 192.33.137.255; +# option routers 192.33.137.250; +# option domain-name-servers 127.0.0.1; +# renew 2 2000/1/12 00:00:01; +# rebind 2 2000/1/12 00:00:01; +# expire 2 2000/1/12 00:00:01; +#} diff --git a/dictionaries-common/ispell-default b/dictionaries-common/ispell-default new file mode 100644 index 0000000..e69de29 diff --git a/dictionaries-common/words b/dictionaries-common/words new file mode 120000 index 0000000..1d20e7e --- /dev/null +++ b/dictionaries-common/words @@ -0,0 +1 @@ +/usr/share/dict/american-english \ No newline at end of file diff --git a/dpkg/dpkg.cfg b/dpkg/dpkg.cfg new file mode 100644 index 0000000..ba898ee --- /dev/null +++ b/dpkg/dpkg.cfg @@ -0,0 +1,13 @@ +# dpkg configuration file +# +# This file can contain default options for dpkg. All command-line +# options are allowed. Values can be specified by putting them after +# the option, separated by whitespace and/or an `=' sign. +# + +# Do not enable debsig-verify by default; since the distribution is not using +# embedded signatures, debsig-verify would reject all packages. +no-debsig + +# Log status changes and actions to a file. +log /var/log/dpkg.log diff --git a/dpkg/origins/debian b/dpkg/origins/debian new file mode 100644 index 0000000..91f6ed1 --- /dev/null +++ b/dpkg/origins/debian @@ -0,0 +1,3 @@ +Vendor: Debian +Vendor-URL: http://www.debian.org/ +Bugs: debbugs://bugs.debian.org diff --git a/dpkg/origins/default b/dpkg/origins/default new file mode 120000 index 0000000..7d13753 --- /dev/null +++ b/dpkg/origins/default @@ -0,0 +1 @@ +ubuntu \ No newline at end of file diff --git a/dpkg/origins/ubuntu b/dpkg/origins/ubuntu new file mode 100644 index 0000000..7cc3ce2 --- /dev/null +++ b/dpkg/origins/ubuntu @@ -0,0 +1,4 @@ +Vendor: Ubuntu +Vendor-URL: http://www.ubuntu.com/ +Bugs: https://bugs.launchpad.net/ubuntu/+filebug +Parent: Debian diff --git a/emacs/site-start.d/50dictionaries-common.el b/emacs/site-start.d/50dictionaries-common.el new file mode 100644 index 0000000..0719f65 --- /dev/null +++ b/emacs/site-start.d/50dictionaries-common.el @@ -0,0 +1,43 @@ +;; File: startup.el.in +;; Description: Emacsen startup for dictionaries-common in Debian +;; Authors: Rafael Laboissière +;; Agustin Martin +;; Created on: Fri Oct 22 09:48:21 CEST 1999 + +(let ((skip-emacs-flavors-list '(emacs19 + emacs20 + emacs21 + emacs22 + emacs-snapshot)) + (debian-dict-entries "/var/cache/dictionaries-common/emacsen-ispell-dicts.el")) + (if (member debian-emacs-flavor skip-emacs-flavors-list) + (message "Skipping dictionaries-common setup for %s" debian-emacs-flavor) + + (debian-pkg-add-load-path-item + (concat "/usr/share/" + (symbol-name debian-emacs-flavor) + "/site-lisp/dictionaries-common")) + + (autoload 'flyspell-word "flyspell" nil t) + (autoload 'flyspell-mode "flyspell" nil t) + (autoload 'flyspell-prog-mode "flyspell" nil t) + + ;; Load Debian emacsen cache file, with entries for installed dictionaries + ;; This might result in a call to debian-ispell, so do this only if + ;; a) It exists, that is, package is not removed. + ;; b) Not in installations under dpkg control, otherwise we might get some + ;; bogus errors on installation because of #132355 and friends. + (if (file-exists-p + (concat "/usr/share/" + (symbol-name debian-emacs-flavor) + "/site-lisp/dictionaries-common/debian-ispell.el")) + (if (getenv "DPKG_RUNNING_VERSION") + (message "Info: Skip debian-el loading if run under dpkg control.") + (let ((coding-system-for-read 'raw-text)) ;; Read these as data streams + (load "debian-ispell" t) + (load debian-dict-entries t))) + (message "Info: Package dictionaries-common removed but not purged.")))) + +;;; Previous code for loading ispell.el and refreshing spell-checking +;;; pulldown menus has been removed from this file since it should no +;;; longer be needed. diff --git a/environment b/environment new file mode 100644 index 0000000..048769c --- /dev/null +++ b/environment @@ -0,0 +1 @@ +PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games" diff --git a/etckeeper/commit.d/10vcs-test b/etckeeper/commit.d/10vcs-test new file mode 100755 index 0000000..e33d734 --- /dev/null +++ b/etckeeper/commit.d/10vcs-test @@ -0,0 +1,17 @@ +#!/bin/sh +set -e + +not_enabled_warning() { + echo "etckeeper warning: etckeeper is not yet enabled for $(pwd)" >&2 + echo "etckeeper warning: run etckeeper init to enable it" >&2 +} + +if [ "$VCS" = git ] && [ ! -d .git ]; then + not_enabled_warning +elif [ "$VCS" = hg ] && [ ! -d .hg ]; then + not_enabled_warning +elif [ "$VCS" = bzr ] && [ ! -d .bzr ]; then + not_enabled_warning +elif [ "$VCS" = darcs ] && [ ! -d _darcs ]; then + not_enabled_warning +fi diff --git a/etckeeper/commit.d/20store-metadata b/etckeeper/commit.d/20store-metadata new file mode 120000 index 0000000..5698d64 --- /dev/null +++ b/etckeeper/commit.d/20store-metadata @@ -0,0 +1 @@ +../pre-commit.d/30store-metadata \ No newline at end of file diff --git a/etckeeper/commit.d/30bzr-add b/etckeeper/commit.d/30bzr-add new file mode 100755 index 0000000..3e7e95d --- /dev/null +++ b/etckeeper/commit.d/30bzr-add @@ -0,0 +1,8 @@ +#!/bin/sh +set -e + +if [ "$VCS" = bzr ] && [ -d .bzr ]; then + if ! bzr add -q .; then + echo "etckeeper warning: bzr add failed" >&2 + fi +fi diff --git a/etckeeper/commit.d/30darcs-add b/etckeeper/commit.d/30darcs-add new file mode 100755 index 0000000..98be4bf --- /dev/null +++ b/etckeeper/commit.d/30darcs-add @@ -0,0 +1,14 @@ +#!/bin/sh +set -e + +if [ "$VCS" = darcs ] && [ -d _darcs ]; then + rc=0 + res=$( darcs add -qr . 2>&1 ) || rc=$? + if test $rc -ne 0; then + if ! test $rc -eq 2 -a "${res%No files were added}" != "$res"; then + printf "%s" "$res" + echo "etckeeper warning: darcs add failed" >&2 + fi + fi + unset rc res +fi diff --git a/etckeeper/commit.d/30git-add b/etckeeper/commit.d/30git-add new file mode 100755 index 0000000..b08b583 --- /dev/null +++ b/etckeeper/commit.d/30git-add @@ -0,0 +1,8 @@ +#!/bin/sh +set -e + +if [ "$VCS" = git ] && [ -d .git ]; then + if ! git add --all; then + echo "etckeeper warning: git add --all" >&2 + fi +fi diff --git a/etckeeper/commit.d/30hg-addremove b/etckeeper/commit.d/30hg-addremove new file mode 100755 index 0000000..1b999bb --- /dev/null +++ b/etckeeper/commit.d/30hg-addremove @@ -0,0 +1,8 @@ +#!/bin/sh +set -e + +if [ "$VCS" = hg ] && [ -d .hg ]; then + if ! hg addremove .; then + echo "etckeeper warning: hg addremove failed" >&2 + fi +fi diff --git a/etckeeper/commit.d/50vcs-commit b/etckeeper/commit.d/50vcs-commit new file mode 100755 index 0000000..55f0db2 --- /dev/null +++ b/etckeeper/commit.d/50vcs-commit @@ -0,0 +1,128 @@ +#!/bin/sh +set -e + +cleanup () { + if [ -n "$logfile" ]; then + rm -f "$logfile" + fi +} +if [ -n "$1" ]; then + trap cleanup EXIT + logfile="$(mktemp -t etckeeper-$VCS.XXXXXXXXXX)" + if [ "x$1" = "x--stdin" ]; then + cat > "$logfile" + else + if [ "x$1" = "x-m" ]; then + shift 1 + fi + echo "$1" > "$logfile" + fi +else + logfile="" +fi + +hostname=`hostname` +hostname="${hostname%%.*}" +dnsdomainname=`dnsdomainname 2>/dev/null || true` +if [ -n "$dnsdomainname" ]; then + hostname="$hostname.$dnsdomainname" +fi + +ORIG_USER=$USER +USER= +if [ -n "$SUDO_USER" ]; then + USER="$SUDO_USER" +else + # try to check tty ownership, in case user su'd to root + TTY="$(tty 2>/dev/null || true)" + if [ -n "$TTY" ] && [ -c "$TTY" ]; then + USER="$(find "$TTY" -printf "%u")" + fi +fi + +if [ "$VCS" = git ] && [ -d .git ]; then + if [ -n "$USER" ]; then + # Use user.name and user.email from the gitconfig belonging + # to the user who became root. + USER_HOME="$(getent passwd "$USER" | cut -d: -f6)" + if [ -n "$USER_HOME" ] && [ -e "$USER_HOME/.gitconfig" ]; then + if [ -z "$GIT_AUTHOR_NAME" ]; then + GIT_AUTHOR_NAME="$(git config -f "$USER_HOME/.gitconfig" user.name)" || true + export GIT_AUTHOR_NAME + fi + if [ -z "$GIT_AUTHOR_EMAIL" ]; then + GIT_AUTHOR_EMAIL="$(git config -f "$USER_HOME/.gitconfig" user.email)" || true + export GIT_AUTHOR_EMAIL + fi + fi + if [ -z "$GIT_AUTHOR_NAME" ] || [ -z "$GIT_AUTHOR_EMAIL" ]; then + if [ -n "$USER_HOME" ] && [ -e "$USER_HOME/.config/git/config" ]; then + if [ -z "$GIT_AUTHOR_NAME" ]; then + GIT_AUTHOR_NAME="$(git config -f "$USER_HOME/.config/git/config" user.name)" || true + export GIT_AUTHOR_NAME + fi + if [ -z "$GIT_AUTHOR_EMAIL" ]; then + GIT_AUTHOR_EMAIL="$(git config -f "$USER_HOME/.config/git/config" user.email)" || true + export GIT_AUTHOR_EMAIL + fi + fi + fi + + if [ -z "$GIT_COMMITTER_EMAIL" ]; then + GIT_COMMITTER_EMAIL="$(git config --global user.email)" || true + export GIT_COMMITTER_EMAIL + fi + if [ -z "$GIT_AUTHOR_NAME" ]; then + GIT_AUTHOR_NAME="$USER" + export GIT_AUTHOR_NAME + fi + if [ -z "$GIT_AUTHOR_EMAIL" ]; then + GIT_AUTHOR_EMAIL="$USER@$hostname" + export GIT_AUTHOR_EMAIL + fi + if [ -z "$GIT_COMMITTER_EMAIL" ]; then + GIT_COMMITTER_EMAIL=`whoami`"@$hostname" + export GIT_COMMITTER_EMAIL + fi + fi + if [ -n "$logfile" ]; then + git commit $GIT_COMMIT_OPTIONS -F "$logfile" + else + git commit $GIT_COMMIT_OPTIONS + fi +elif [ "$VCS" = hg ] && [ -d .hg ]; then + if [ -n "$USER" ]; then + LOGNAME="$USER" + export LOGNAME + fi + if [ -z "$HGUSER" ]; then + HGUSER="$USER@$hostname" + export HGUSER + fi + if [ -n "$logfile" ]; then + hg commit $HG_COMMIT_OPTIONS -l "$logfile" + else + hg commit $HG_COMMIT_OPTIONS + fi +elif [ "$VCS" = bzr ] && [ -d .bzr ]; then + if [ -z "$EMAIL" ] && [ -n "$USER" ]; then + EMAIL="$USER <$USER@$hostname>" + export EMAIL + else + bzr whoami >/dev/null 2>&1 || export EMAIL="$ORIG_USER <$ORIG_USER@$hostname>" + fi + if [ -n "$logfile" ]; then + bzr commit $BZR_COMMIT_OPTIONS -F "$logfile" + else + bzr commit $BZR_COMMIT_OPTIONS + fi +elif [ "$VCS" = darcs ] && [ -d _darcs ]; then + if [ -z "$USER" ]; then + USER=root + fi + if [ -n "$logfile" ]; then + darcs record --author="$USER" $DARCS_COMMIT_OPTIONS --logfile="$logfile" + else + darcs record --author="$USER" $DARCS_COMMIT_OPTIONS + fi +fi diff --git a/etckeeper/commit.d/99push b/etckeeper/commit.d/99push new file mode 100755 index 0000000..b5418f7 --- /dev/null +++ b/etckeeper/commit.d/99push @@ -0,0 +1,14 @@ +#!/bin/sh +if [ -n "$PUSH_REMOTE" ]; then + if [ "$VCS" = git ] && [ -d .git ]; then + for REMOTE in $PUSH_REMOTE; do + git push "$REMOTE" master || true + done + elif [ "$VCS" = hg ] && [ -d .hg ]; then + for REMOTE in $PUSH_REMOTE; do + hg push "$REMOTE" || true + done + else + echo "PUSH_REMOTE not yet supported for $VCS" >&2 + fi +fi diff --git a/etckeeper/commit.d/README b/etckeeper/commit.d/README new file mode 100644 index 0000000..25d0d45 --- /dev/null +++ b/etckeeper/commit.d/README @@ -0,0 +1,3 @@ +Files in this directory are run when there might be changes to commit. +(Before and after packages are installed, upgraded, etc.) +They should commit changes and new files in /etc to repository. diff --git a/etckeeper/daily b/etckeeper/daily new file mode 100755 index 0000000..f98c6ad --- /dev/null +++ b/etckeeper/daily @@ -0,0 +1,17 @@ +#!/bin/sh +# Script that can be run daily to autocommit /etc changes. +set -e +if [ -x /usr/bin/etckeeper ] && [ -e /etc/etckeeper/etckeeper.conf ]; then + # avoid autocommit if an install run is in progress + lockfile=/var/cache/etckeeper/packagelist.pre-install + if [ -e "$lockfile" ] && [ -n "$(find "$lockfile" -mtime +1)" ]; then + rm -f "$lockfile" # stale + fi + if [ ! -e "$lockfile" ]; then + AVOID_SPECIAL_FILE_WARNING=1 + export AVOID_SPECIAL_FILE_WARNING + if etckeeper unclean; then + etckeeper commit "daily autocommit" >/dev/null + fi + fi +fi diff --git a/etckeeper/etckeeper.conf b/etckeeper/etckeeper.conf new file mode 100644 index 0000000..f13de1c --- /dev/null +++ b/etckeeper/etckeeper.conf @@ -0,0 +1,45 @@ +# The VCS to use. +#VCS="hg" +VCS="git" +#VCS="bzr" +#VCS="darcs" + +# Options passed to git commit when run by etckeeper. +GIT_COMMIT_OPTIONS="" + +# Options passed to hg commit when run by etckeeper. +HG_COMMIT_OPTIONS="" + +# Options passed to bzr commit when run by etckeeper. +BZR_COMMIT_OPTIONS="" + +# Options passed to darcs record when run by etckeeper. +DARCS_COMMIT_OPTIONS="-a" + +# Etckeeper includes both a cron job and a systemd timer, which each +# can commit exiting changes to /etc automatically once per day. +# To enable the systemd timer, run: systemctl enable etckeeper.timer +# The cron job is enabled by default; to disable it, uncomment this next line. +#AVOID_DAILY_AUTOCOMMITS=1 + +# Uncomment the following to avoid special file warning +# (the option is enabled automatically for daily autocommits regardless). +#AVOID_SPECIAL_FILE_WARNING=1 + +# Uncomment to avoid etckeeper committing existing changes to +# /etc before installation. It will cancel the installation, +# so you can commit the changes by hand. +#AVOID_COMMIT_BEFORE_INSTALL=1 + +# The high-level package manager that's being used. +# (apt, pacman, pacman-g2, yum, dnf, zypper, apk etc) +HIGHLEVEL_PACKAGE_MANAGER=apt + +# The low-level package manager that's being used. +# (dpkg, rpm, pacman, pacmatic, pacman-g2, apk etc) +LOWLEVEL_PACKAGE_MANAGER=dpkg + +# To push each commit to a remote, put the name of the remote here. +# (eg, "origin" for git). Space-separated lists of multiple remotes +# also work (eg, "origin gitlab github" for git). +PUSH_REMOTE="" diff --git a/etckeeper/init.d/10restore-metadata b/etckeeper/init.d/10restore-metadata new file mode 100755 index 0000000..9c2bf65 --- /dev/null +++ b/etckeeper/init.d/10restore-metadata @@ -0,0 +1,14 @@ +#!/bin/sh +set -e + +# Note that metastore doesn't check that the .metastore file only changes +# perms of files in the current directory. It's ok to trust the .metastore +# file won't do anything shady, because, as documented, etckeeper-init +# should only be run on repositories you trust. +if [ -e .metadata ]; then + if which metastore >/dev/null; then + metastore --apply --mtime + else + echo "etckeeper warning: legacy .metastore file is present but metastore is not installed" >&2 + fi +fi diff --git a/etckeeper/init.d/20restore-etckeeper b/etckeeper/init.d/20restore-etckeeper new file mode 100755 index 0000000..0485e63 --- /dev/null +++ b/etckeeper/init.d/20restore-etckeeper @@ -0,0 +1,22 @@ +#!/bin/sh +set -e + +# Used by .etckeeper to run a command if the file it acts on +# (the last parameter) exists. +maybe () { + command="$1" + shift 1 + + if eval [ -e "\"\$$#\"" ]; then + "$command" "$@" + fi +} + +# Yes, this runs code from the repository. As documented, etckeeper-init +# should only be run on repositories you trust. +if [ -e .etckeeper ]; then + . ./.etckeeper +else + touch .etckeeper + chmod 600 .etckeeper +fi diff --git a/etckeeper/init.d/40vcs-init b/etckeeper/init.d/40vcs-init new file mode 100755 index 0000000..3c7a3bb --- /dev/null +++ b/etckeeper/init.d/40vcs-init @@ -0,0 +1,17 @@ +#!/bin/sh +set -e + +if [ "$VCS" = git ] && [ ! -e .git ]; then + git init + echo "$(hostname) /etc repository" > .git/description +elif [ "$VCS" = hg ] && [ ! -e .hg ]; then + hg init + echo "[web]" > .hg/hgrc + echo "description = $(hostname) /etc repository" >> .hg/hgrc +elif [ "$VCS" = bzr ] && [ ! -e .bzr ]; then + bzr init + bzr nick "$(hostname) /etc repository" +elif [ "$VCS" = darcs ] && [ ! -e _darcs ]; then + darcs initialize + echo "$(hostname) /etc repository" > _darcs/prefs/motd +fi diff --git a/etckeeper/init.d/50vcs-ignore b/etckeeper/init.d/50vcs-ignore new file mode 100755 index 0000000..33d79d3 --- /dev/null +++ b/etckeeper/init.d/50vcs-ignore @@ -0,0 +1,4 @@ +#!/bin/sh +set -e + +etckeeper update-ignore -a || true diff --git a/etckeeper/init.d/50vcs-perm b/etckeeper/init.d/50vcs-perm new file mode 100755 index 0000000..4dd080b --- /dev/null +++ b/etckeeper/init.d/50vcs-perm @@ -0,0 +1,12 @@ +#!/bin/sh +set -e + +if [ "$VCS" = git ]; then + chmod 700 .git +elif [ "$VCS" = hg ]; then + chmod 700 .hg +elif [ "$VCS" = bzr ]; then + chmod 700 .bzr +elif [ "$VCS" = darcs ]; then + chmod 700 _darcs +fi diff --git a/etckeeper/init.d/50vcs-pre-commit-hook b/etckeeper/init.d/50vcs-pre-commit-hook new file mode 100755 index 0000000..6045981 --- /dev/null +++ b/etckeeper/init.d/50vcs-pre-commit-hook @@ -0,0 +1,49 @@ +#!/bin/sh +set -e + +case "$VCS" in + git) + if [ -x .git/hooks/pre-commit ]; then + if ! grep -q "etckeeper pre-commit" .git/hooks/pre-commit; then + echo "etckeeper warning: .git/hooks/pre-commit needs to be manually modified to run: etckeeper pre-commit -d `pwd`" >&2 + fi + else + cat >.git/hooks/pre-commit <&2 + fi + else + touch .hg/hgrc + cat >>.hg/hgrc <&2 + fi + else + cat >_darcs/prefs/defaults < "$patternsfile" || true + grep -Evf "$patternsfile" + rm -f "$patternsfile" + unset patternsfile + else + cat - + fi +} + + +if [ "$VCS" = darcs ];then + NOVCS='. -path ./.git -prune -o -path ./.bzr -prune -o -path ./.hg -prune -o -path ./_darcs -prune -o' + + # We assume that if .etckeeper is empty this is the first run + if [ -s .etckeeper ]; then + linksindex="$( mktemp -t etckeeper-$VCS.XXXXXXXXXX )" + grep '^ln -s' .etckeeper | while IFS="'" read n n n link n; do + printf "%s\n" "$link" >> "$linksindex" + done + + # Warn about symbolic links that shouldn't exist + if links=$( find $NOVCS -type l -print | filter_ignore | grep -vFf "$linksindex" ); then + printf "%s\n%s\n" \ + "The following symbolic links should not exist:" \ + "$links" >&2 + fi + + rm -f "$linksindex" + unset links linksindex + fi + +fi diff --git a/etckeeper/init.d/70vcs-add b/etckeeper/init.d/70vcs-add new file mode 100755 index 0000000..9a9ec45 --- /dev/null +++ b/etckeeper/init.d/70vcs-add @@ -0,0 +1,27 @@ +#!/bin/sh +set -e + +if [ "$VCS" = git ]; then + if ! git add .; then + echo "etckeeper warning: git add failed" >&2 + fi +elif [ "$VCS" = hg ]; then + if ! hg add .; then + echo "etckeeper warning: hg add failed" >&2 + fi +elif [ "$VCS" = bzr ]; then + if ! bzr add .; then + echo "etckeeper warning: bzr add failed" >&2 + fi +elif [ "$VCS" = darcs ]; then + # Don't warn if all the files were already added. + rc=0 + res=$( darcs add -qr . 2>&1 ) || rc=$? + if test $rc -ne 0; then + if ! test $rc -eq 2 -a "${res%No files were added}" != "$res"; then + printf "%s" "$res" + echo "etckeeper warning: darcs add failed" >&2 + fi + fi + unset rc res +fi diff --git a/etckeeper/init.d/README b/etckeeper/init.d/README new file mode 100644 index 0000000..90aec67 --- /dev/null +++ b/etckeeper/init.d/README @@ -0,0 +1,13 @@ +Executable files in this directory are run to initialise the working directory +for use by etckeeper. If the working directory is not already in version +control, that includes setting up the version control, but not actually +committing anything. If the working directory is in version control, +it includes applying stored metadata to the checked out files in the +working directory. + +Please be careful to *never* overwrite existing files/directories +in the working directory (or use absolute care when doing so). If a file +you need to write already exists, check if its contents are sane, and +if not, emit a warning on stderr. + +If initialisation fails, exit nonzero and no later files will be run. diff --git a/etckeeper/list-installed.d/50list-installed b/etckeeper/list-installed.d/50list-installed new file mode 100755 index 0000000..d89b8ce --- /dev/null +++ b/etckeeper/list-installed.d/50list-installed @@ -0,0 +1,27 @@ +#!/bin/sh +if [ "$1" = fmt ]; then + # If the list format changes, change the fmt + if [ "$LOWLEVEL_PACKAGE_MANAGER" = dpkg ]; then + echo 2 + else + echo "" + fi +else + # Output to stdout a *sorted* list of all currently installed + # (or removed but still with config-files) packages, in the + # format "package version\n" (or something similar). + if [ "$LOWLEVEL_PACKAGE_MANAGER" = dpkg ]; then + dpkg-query -W -f '${Status}\t${Package} ${Version} ${Architecture}\n' | \ + egrep '(ok installed|ok config-files)' | cut -f2,3 + elif [ "$LOWLEVEL_PACKAGE_MANAGER" = rpm ]; then + rpm -qa --qf "%|epoch?{%{epoch}}:{0}|:%{name}-%{version}-%{release}.%{arch}\n" | sort + elif [ "$LOWLEVEL_PACKAGE_MANAGER" = pacman ]; then + pacman -Q + elif [ "$LOWLEVEL_PACKAGE_MANAGER" = pacmatic ]; then + pacmatic -Q + elif [ "$LOWLEVEL_PACKAGE_MANAGER" = pkgng ]; then + pkg info -E "*" + elif [ "$LOWLEVEL_PACKAGE_MANAGER" = apk ]; then + apk info -v | sort + fi +fi diff --git a/etckeeper/post-install.d/50vcs-commit b/etckeeper/post-install.d/50vcs-commit new file mode 100755 index 0000000..53138c8 --- /dev/null +++ b/etckeeper/post-install.d/50vcs-commit @@ -0,0 +1,28 @@ +#!/bin/sh +set -e + +pl="/var/cache/etckeeper/packagelist" + +if etckeeper unclean; then + message="committing changes in /etc after $HIGHLEVEL_PACKAGE_MANAGER run" + + set +e + if [ -e $pl.pre-install ] && [ "$(cat $pl.fmt 2>/dev/null || true)" = "$(etckeeper list-installed fmt)" ]; then + ( + echo "$message" + echo + echo "Package changes:" + etckeeper list-installed | diff -U0 $pl.pre-install - | tail -n+4 | egrep '^[-+]' || true + ) | etckeeper commit --stdin + else + etckeeper commit "$(printf "$message")" + fi + status=$? + set -e + + if [ "$status" != 0 ]; then + echo "warning: etckeeper failed to commit changes in /etc using $VCS" >&2 + fi +fi + +rm -f $pl.pre-install $pl.fmt diff --git a/etckeeper/post-install.d/README b/etckeeper/post-install.d/README new file mode 100644 index 0000000..62f4f9c --- /dev/null +++ b/etckeeper/post-install.d/README @@ -0,0 +1,2 @@ +Files in this directory are run after packages are installed, upgraded, etc. +They should commit changes and new files in /etc to repository. diff --git a/etckeeper/pre-commit.d/20warn-problem-files b/etckeeper/pre-commit.d/20warn-problem-files new file mode 100755 index 0000000..6bd5c2b --- /dev/null +++ b/etckeeper/pre-commit.d/20warn-problem-files @@ -0,0 +1,30 @@ +#!/bin/sh +set -e + +exclude_internal () { + egrep -v '(^|/)(\.git|\.hg|\.bzr|_darcs)/' +} + +if [ "$VCS" = bzr ] || [ "$VCS" = darcs ]; then + special=$(find . ! -type d ! -type f ! -type l | exclude_internal) || true + hardlinks=$(find . -type f ! -links 1 | exclude_internal ) || true +elif [ "$VCS" = hg ]; then + special=$(find . ! -type d ! -type f ! -type l | exclude_internal) || true + hardlinks=$(find . -type f ! -links 1 -exec hg status {} \; | exclude_internal ) || true +elif [ "$VCS" = git ]; then + special=$(find . ! -type d ! -type f ! -type l -exec git ls-files --exclude-standard --cached --others {} + | exclude_internal) || true + hardlinks=$(find . -type f ! -links 1 -exec git ls-files --exclude-standard --cached --others {} + | exclude_internal) || true +else + special="" +fi + +if [ -n "$special" ] && [ -z "$AVOID_SPECIAL_FILE_WARNING" ]; then + echo "etckeeper warning: special files could cause problems with $VCS:" >&2 + echo "$special" >&2 +fi +if [ -n "$hardlinks" ] && [ -z "$AVOID_SPECIAL_FILE_WARNING" ]; then + echo "etckeeper warning: hardlinked files could cause problems with $VCS:" >&2 + echo "$hardlinks" >&2 +fi + +true diff --git a/etckeeper/pre-commit.d/30store-metadata b/etckeeper/pre-commit.d/30store-metadata new file mode 100755 index 0000000..e070bce --- /dev/null +++ b/etckeeper/pre-commit.d/30store-metadata @@ -0,0 +1,175 @@ +#!/bin/sh +set -e + +# Make sure sort always sorts in same order. +LANG=C.UTF-8 +export LANG + +filter_ignore() { + case "$VCS" in + darcs) ignorefile=.darcsignore ;; + git) ignorefile=.gitignore ;; + esac + + if [ -n "$ignorefile" ] && [ -e "$ignorefile" ]; then + listfile="$( mktemp -t etckeeper-$VCS.XXXXXXXXXX )" + case "$VCS" in + darcs) + grep -v '^[[:space:]]*\(#\|$\)' "$ignorefile" > "$listfile" || true + grep -Evf "$listfile" + ;; + git) + (git ls-files -oi --exclude-standard; git ls-files -oi --exclude-standard --directory) | sort | uniq > "$listfile" || true + if [ -s "$listfile" ]; then + sed 's/^\.\///' | grep -xFvf "$listfile" + else + cat - + fi + ;; + esac + rm -f "$listfile" + unset listfile + else + cat - + fi +} + +shellquote() { + # Single quotes text, escaping existing single quotes. + sed -e "s/'/'\"'\"'/g" -e "s/^/'/" -e "s/$/'/" +} + +generate_metadata() { + # This function generates the script commands to fix any file + # ownerships that aren't owner=root, group=root, as well as to + # store the permissions of files. + # The script is produced on stdout. Errors go to stderr. + # + # The script can use a 'maybe' function, which only runs a command + # if the file in its last argument exists. + + # We want files in the directory containing VCS data + # but we want find to ignore the VCS files themselves. + # + # (Note that when using this, the find expression must end with + # -print or -exec, else the excluded directories will actually be + # printed!) + NOVCS='. -path ./.git -prune -o -path ./.bzr -prune -o -path ./.hg -prune -o -path ./_darcs -prune -o' + + # Keep the sort order the same at all times. + LC_COLLATE=C + export LC_COLLATE + unset LC_ALL + + if [ "$VCS" = git ] || [ "$VCS" = hg ]; then + # These version control systems do not track directories, + # so empty directories must be stored specially. + find $NOVCS -type d -empty -print | + sort | shellquote | sed -e "s/^/mkdir -p /" + fi + + if [ "$VCS" = darcs ]; then + # This version control system does not track symlinks, + # so they must be stored specially. + find $NOVCS -type l -print | sort | filter_ignore | while read link; do + dest=$( readlink "$link" ) + printf "ln -sf '%s' '%s'\n" "$(echo "$dest" | shellquote)" "$(echo "$link" | shellquote)" + done + fi + + # Store things that don't have the default user or group. + # Store all file modes, in case the user has an unusual umask. + find $NOVCS \( -type f -or -type d \) -print | filter_ignore | sort | maybe_chmod_chown + + # We don't handle xattrs. + # Maybe check for getfattr/setfattr and use them if they're available? +} + +maybe_chmod_chown() { + if [ "$(which perl 2>/dev/null)" != "" ]; then + perl -ne ' + BEGIN { $q=chr(39) } + sub uidname { + my $want=shift; + if (exists $uidcache{$want}) { + return $uidcache{$want}; + } + my $name=scalar getpwuid($want); + return $uidcache{$want}=defined $name ? $name : $want; + } + sub gidname { + my $want=shift; + if (exists $gidcache{$want}) { + return $gidcache{$want}; + } + my $name=scalar getgrgid($want); + return $gidcache{$want}=defined $name ? $name : $want; + } + chomp; + my @stat=stat($_); + my $mode = $stat[2]; + my $uid = $stat[4]; + my $gid = $stat[5]; + s/$q/$q"$q"$q/g; # escape single quotes + s/^/$q/; + s/$/$q/; + if ($uid != $>) { + printf "maybe chown $q%s$q %s\n", uidname($uid), $_; + } + if ($gid != $)) { + printf "maybe chgrp $q%s$q %s\n", gidname($gid), $_; + } + printf "maybe chmod %04o %s\n", $mode & 07777, $_; + ' + return $? + else + # fallback if perl isn't present + euid=$(id -u) + egid=$(id -g) + q="'" + while read x; do + stat=$(stat -c "%f:%u:%g:%a:%U:%G" $x) + IFS=":" read mode uid gid perm uname gname < .etckeeper + echo >> .etckeeper + + # Make sure the file is not readable by others, since it can leak + # information about contents of non-readable directories in /etc. + chmod 700 .etckeeper + + generate_metadata >> .etckeeper + + # stage the file as part of the current commit + if [ "$VCS" = git ]; then + # this will do nothing if the metadata file is unchanged. + git add .etckeeper + fi + # hg, bzr and darcs add not done, they will automatically + # include the file in the current commit +fi diff --git a/etckeeper/pre-commit.d/README b/etckeeper/pre-commit.d/README new file mode 100644 index 0000000..051d094 --- /dev/null +++ b/etckeeper/pre-commit.d/README @@ -0,0 +1,2 @@ +This is run by a git pre-commit hook before committing changes to the +repository. This can be used for storing metadata, and for sanity checks. diff --git a/etckeeper/pre-install.d/10packagelist b/etckeeper/pre-install.d/10packagelist new file mode 100755 index 0000000..fbd4ac3 --- /dev/null +++ b/etckeeper/pre-install.d/10packagelist @@ -0,0 +1,5 @@ +#!/bin/sh +# This list will be later used when committing. +mkdir -p /var/cache/etckeeper/ +etckeeper list-installed > /var/cache/etckeeper/packagelist.pre-install +etckeeper list-installed fmt > /var/cache/etckeeper/packagelist.fmt diff --git a/etckeeper/pre-install.d/50uncommitted-changes b/etckeeper/pre-install.d/50uncommitted-changes new file mode 100755 index 0000000..969d341 --- /dev/null +++ b/etckeeper/pre-install.d/50uncommitted-changes @@ -0,0 +1,15 @@ +#!/bin/sh +set -e + +if etckeeper unclean; then + if [ "$AVOID_COMMIT_BEFORE_INSTALL" = 1 ]; then + echo "" >&2 + echo "** etckeeper detected uncommitted changes in /etc prior to $HIGHLEVEL_PACKAGE_MANAGER run" >&2 + echo "** Aborting $HIGHLEVEL_PACKAGE_MANAGER run. Manually commit and restart." >&2 + echo "" >&2 + exit 1 + fi + if ! etckeeper commit "saving uncommitted changes in /etc prior to $HIGHLEVEL_PACKAGE_MANAGER run"; then + echo "warning: etckeeper failed to commit changes in /etc using $VCS" >&2 + fi +fi diff --git a/etckeeper/pre-install.d/README b/etckeeper/pre-install.d/README new file mode 100644 index 0000000..a3b5a57 --- /dev/null +++ b/etckeeper/pre-install.d/README @@ -0,0 +1,3 @@ +Files in this directory are run before packages are installed, upgraded, +etc. This is mostly used for sanity checks, ie, does /etc have any +uncommitted changes? diff --git a/etckeeper/unclean.d/50test b/etckeeper/unclean.d/50test new file mode 100755 index 0000000..e52003f --- /dev/null +++ b/etckeeper/unclean.d/50test @@ -0,0 +1,12 @@ +#!/bin/sh +set -e + +if [ "$VCS" = git ]; then + [ -d .git ] && [ -n "`git status --porcelain`" ] +elif [ "$VCS" = hg ]; then + [ -d .hg ] && ! hg status 2>&1 | wc -l | grep -q "^0$" +elif [ "$VCS" = bzr ]; then + [ -d .bzr ] && ! bzr version-info --custom --template="{clean}\n" | grep -q "^1$" +elif [ "$VCS" = darcs ]; then + [ -d _darcs ] && darcs whatsnew -l >/dev/null +fi diff --git a/etckeeper/unclean.d/README b/etckeeper/unclean.d/README new file mode 100644 index 0000000..74bfbdd --- /dev/null +++ b/etckeeper/unclean.d/README @@ -0,0 +1,2 @@ +Files in this directory are used to test if the working copy has +uncommitted changes. diff --git a/etckeeper/uninit.d/01prompt b/etckeeper/uninit.d/01prompt new file mode 100755 index 0000000..8b43937 --- /dev/null +++ b/etckeeper/uninit.d/01prompt @@ -0,0 +1,20 @@ +#!/bin/sh +set -e + +if [ "$1" != "-f" ]; then + echo "** Warning: This will DESTROY all recorded history for $ETCKEEPER_DIR," + echo "** including the $VCS repository." + echo "" + printf "Are you sure you want to do this? [yN] " + read answer + case "$answer" in + [Yy]*) + echo "Proceeding.." + exit 0 + ;; + *) + echo "Aborting etckeeper uninit." + exit 1 + ;; + esac +fi diff --git a/etckeeper/uninit.d/50remove-metadata b/etckeeper/uninit.d/50remove-metadata new file mode 100755 index 0000000..0be8d36 --- /dev/null +++ b/etckeeper/uninit.d/50remove-metadata @@ -0,0 +1,6 @@ +#!/bin/sh +set -e + +# Files generated by etckeeper to store metadata the VCS cannot preserve. +rm -f .etckeeper +rm -f .metadata # only generated by old versions diff --git a/etckeeper/uninit.d/50vcs-uninit b/etckeeper/uninit.d/50vcs-uninit new file mode 100755 index 0000000..06317c5 --- /dev/null +++ b/etckeeper/uninit.d/50vcs-uninit @@ -0,0 +1,54 @@ +#!/bin/sh +set -e + +if [ "$VCS" = git ]; then + rm -rf .git + file=.gitignore +elif [ "$VCS" = hg ]; then + rm -rf .hg + file=.hgignore +elif [ "$VCS" = bzr ]; then + rm -rf .bzr + file=.bzrignore +elif [ "$VCS" = darcs ]; then + rm -rf _darcs + file=.darcsignore +fi + +managed_by_etckeeper="managed by etckeeper" + +if ! grep -q "$managed_by_etckeeper" "$file"; then + exit 0 +else + realfile="$file" + if which tempfile >/dev/null 2>&1 || type tempfile >/dev/null 2>&1; then + tempfile="tempfile" + elif which mktemp >/dev/null 2>&1 || type mktemp >/dev/null 2>&1; then + tempfile="mktemp" + else + echo "etckeeper warning: can't find tempfile or mktemp" >&2 + exit 1 + fi + file=$($tempfile) + otherentries= + skipping= + while read -r line; do + if echo "$line" | grep -q "$managed_by_etckeeper"; then + if [ ! "$skipping" ]; then + skipping=1 + else + skipping= + fi + elif [ ! "$skipping" ]; then + echo "$line" >> "$file" + otherentries=1 + fi + done <"$realfile" + + if [ "$otherentries" ]; then + mv -f "$file" "$realfile" + else + rm -f "$file" + rm -f "$realfile" + fi +fi diff --git a/etckeeper/uninit.d/README b/etckeeper/uninit.d/README new file mode 100644 index 0000000..d1a4eaa --- /dev/null +++ b/etckeeper/uninit.d/README @@ -0,0 +1,2 @@ +Executable files in this directory are run to uninitialise the working +directory, removing files added by `etckeeper init`. diff --git a/etckeeper/update-ignore.d/01update-ignore b/etckeeper/update-ignore.d/01update-ignore new file mode 100755 index 0000000..8733a85 --- /dev/null +++ b/etckeeper/update-ignore.d/01update-ignore @@ -0,0 +1,209 @@ +#!/bin/sh +set -e + +if [ "$VCS" = git ]; then + dir=.git + file=.gitignore +elif [ "$VCS" = hg ]; then + dir=.hg + file=.hgignore +elif [ "$VCS" = bzr ]; then + dir=.bzr + file=.bzrignore +elif [ "$VCS" = darcs ]; then + dir=_darcs + file=.darcsignore +else + echo "etckeeper: unsupported VCS $VCS" >&2 + exit 1 +fi + +if [ ! -d "$dir" ]; then + exit 0 +fi + +managed_by_etckeeper="managed by etckeeper" + +nl() { + echo >>"$file" +} + +comment() { + comment="$1" + echo "# $comment" >>"$file" +} + +ignore() { + glob="$1" + + case "$VCS" in + git) + # escape "#" in ignores, as otherwise it may + # be considered a comment + echo "$glob" | sed 's/#/\\#/g' >>"$file" + ;; + bzr) + echo "$glob" >>"$file" + ;; + hg) + # rather than converting the glob to a regexp, just + # configure hg to use globs + if [ -z "$hg_syntax_printed" ]; then + comment "use glob syntax" + echo "syntax: glob" >>"$file" + nl + hg_syntax_printed=1 + fi + echo "$glob" | sed 's/#/\\#/g' >>"$file" + ;; + darcs) + # darcs doesn't understand globs, so we need to + # translate them into regexs. Not a complete converter, + # but suitable for given globs. + if [ "${glob%\*}" != "$glob" ]; then + glob="${glob%\*}" + else + glob="$glob"'($|/)' + fi + if [ "${glob#\*}" != "$glob" ]; then + glob="${glob#\*}" + else + glob='(^|/)'"$glob" + fi + glob="$( printf %s $glob | sed -e 's/\./\\./g;s/\*/[^\/]*/g;s/\?/[^\/]/g' )" + echo "$glob" >>"$file" + esac +} + +writefile () { + comment "begin section $managed_by_etckeeper (do not edit this section by hand)" + nl + + if [ "$VCS" = darcs ]; then + darcs setpref boringfile .darcsignore + fi + + if [ "$LOWLEVEL_PACKAGE_MANAGER" = dpkg ]; then + comment "new and old versions of conffiles, stored by dpkg" + ignore "*.dpkg-*" + comment "new and old versions of conffiles, stored by ucf" + ignore "*.ucf-*" + nl + elif [ "$LOWLEVEL_PACKAGE_MANAGER" = "rpm" ]; then + comment "new and old versions of conffiles, stored by apt/rpm" + ignore "*.rpm*" + nl + elif [ "$LOWLEVEL_PACKAGE_MANAGER" = "pacman-g2" -o "$LOWLEVEL_PACKAGE_MANAGER" = "pacman" -o "$LOWLEVEL_PACKAGE_MANAGER" = "pacmatic" ]; then + comment "new and old versions of conffiles, stored by pacman" + ignore "*.pacnew" + ignore "*.pacorig" + ignore "*.pacsave" + nl + elif [ "$LOWLEVEL_PACKAGE_MANAGER" = "apk" ]; then + comment "new versions of conffiles, stored by apk" + ignore "*.apk-new" + nl + fi + + comment "old versions of files" + ignore "*.old" + # Not currently ignored as admins tend to rely on these files. + #ignore "passwd-" + #ignore "group-" + #ignore "shadow-" + #ignore "gshadow-" + nl + + comment "mount(8) records system state here, no need to store these" + ignore blkid.tab + ignore blkid.tab.old + nl + + comment "some other files in /etc that typically do not need to be tracked" + ignore nologin + ignore ld.so.cache + ignore prelink.cache + ignore mtab + ignore mtab.fuselock + ignore .pwd.lock + ignore "*.LOCK" + ignore network/run + ignore adjtime + ignore lvm/cache + ignore lvm/archive + ignore "X11/xdm/authdir/authfiles/*" + ignore ntp.conf.dhcp + ignore .initctl + ignore "webmin/fsdump/*.status" + ignore "webmin/webmin/oscache" + ignore "apparmor.d/cache/*" + ignore "service/*/supervise/*" + ignore "service/*/log/supervise/*" + ignore "sv/*/supervise/*" + ignore "sv/*/log/supervise/*" + ignore "*.elc" + ignore "*.pyc" + ignore "*.pyo" + ignore "init.d/.depend.*" + ignore "openvpn/openvpn-status.log" + ignore "cups/subscriptions.conf" + ignore "cups/subscriptions.conf.O" + ignore "fake-hwclock.data" + ignore "check_mk/logwatch.state" + nl + + comment "editor temp files" + ignore "*~" + ignore ".*.sw?" + ignore ".sw?" + ignore "#*#" + ignore DEADJOE + + nl + comment "end section $managed_by_etckeeper" +} + +if [ -e "$file" ]; then + if ! grep -q "$managed_by_etckeeper" "$file"; then + if [ "$1" != "-a" ]; then + echo "etckeeper: "$file" does not contain \"$managed_by_etckeeper\" comment; not updating" + exit 1 + else + echo "etckeeper: "$file" exists but does not contain \"$managed_by_etckeeper\" comment; updating" + writefile + exit 0 + fi + fi + realfile="$file" + if which tempfile >/dev/null 2>&1 || type tempfile >/dev/null 2>&1; then + tempfile="tempfile" + elif which mktemp >/dev/null 2>&1 || type mktemp >/dev/null 2>&1; then + tempfile="mktemp" + else + echo "etckeeper warning: can't find tempfile or mktemp" >&2 + fi + file=$($tempfile) + ( + skipping= + while read -r line; do + if echo "$line" | grep -q "$managed_by_etckeeper"; then + if [ ! "$skipping" ]; then + skipping=1 + else + skipping= + writefile + fi + elif [ ! "$skipping" ]; then + echo "$line" >> "$file" + fi + done + if [ "$skipping" ]; then + # reached end of file w/o ending block + writefile + fi + ) <"$realfile" + + mv -f "$file" "$realfile" +else + writefile +fi diff --git a/etckeeper/update-ignore.d/README b/etckeeper/update-ignore.d/README new file mode 100644 index 0000000..a573135 --- /dev/null +++ b/etckeeper/update-ignore.d/README @@ -0,0 +1,2 @@ +Executable files in this directory are run to update the VCS ignore file, +or create it if it does not exist. diff --git a/etckeeper/vcs.d/50vcs-cmd b/etckeeper/vcs.d/50vcs-cmd new file mode 100755 index 0000000..f515abb --- /dev/null +++ b/etckeeper/vcs.d/50vcs-cmd @@ -0,0 +1,11 @@ +#!/bin/sh +set -e + +# check whether we can locate the vcs binary +if [ -n "$VCS" ] && which "$VCS" > /dev/null; then + # pass commands to the VCS application + $VCS "$@" +else + echo "error: VCS ($VCS) not set or not in PATH" >&2 + exit 1 +fi diff --git a/fonts/conf.avail/10-antialias.conf b/fonts/conf.avail/10-antialias.conf new file mode 100644 index 0000000..913d117 --- /dev/null +++ b/fonts/conf.avail/10-antialias.conf @@ -0,0 +1,8 @@ + + + + + + true + + diff --git a/fonts/conf.avail/10-autohint.conf b/fonts/conf.avail/10-autohint.conf new file mode 100644 index 0000000..50ec3b4 --- /dev/null +++ b/fonts/conf.avail/10-autohint.conf @@ -0,0 +1,19 @@ + + + + + + + + Enable autohinter + + + + true + + diff --git a/fonts/conf.avail/10-hinting-full.conf b/fonts/conf.avail/10-hinting-full.conf new file mode 100644 index 0000000..aff7976 --- /dev/null +++ b/fonts/conf.avail/10-hinting-full.conf @@ -0,0 +1,19 @@ + + + + + + + + Set hintfull to hintstyle + + + + hintfull + + diff --git a/fonts/conf.avail/10-hinting-medium.conf b/fonts/conf.avail/10-hinting-medium.conf new file mode 100644 index 0000000..1d49f3a --- /dev/null +++ b/fonts/conf.avail/10-hinting-medium.conf @@ -0,0 +1,19 @@ + + + + + + + + Set hintmedium to hintstyle + + + + hintmedium + + diff --git a/fonts/conf.avail/10-hinting-none.conf b/fonts/conf.avail/10-hinting-none.conf new file mode 100644 index 0000000..a134ed8 --- /dev/null +++ b/fonts/conf.avail/10-hinting-none.conf @@ -0,0 +1,19 @@ + + + + + + + + Set hintnone to hintstyle + + + + hintnone + + diff --git a/fonts/conf.avail/10-hinting-slight.conf b/fonts/conf.avail/10-hinting-slight.conf new file mode 100644 index 0000000..f00bcd3 --- /dev/null +++ b/fonts/conf.avail/10-hinting-slight.conf @@ -0,0 +1,19 @@ + + + + + + + + Set hintslight to hintstyle + + + + hintslight + + diff --git a/fonts/conf.avail/10-no-sub-pixel.conf b/fonts/conf.avail/10-no-sub-pixel.conf new file mode 100644 index 0000000..4fd1776 --- /dev/null +++ b/fonts/conf.avail/10-no-sub-pixel.conf @@ -0,0 +1,19 @@ + + + + + + + + Disable sub-pixel rendering + + + + none + + diff --git a/fonts/conf.avail/10-scale-bitmap-fonts.conf b/fonts/conf.avail/10-scale-bitmap-fonts.conf new file mode 100644 index 0000000..ebb6c7b --- /dev/null +++ b/fonts/conf.avail/10-scale-bitmap-fonts.conf @@ -0,0 +1,87 @@ + + + + + + + + Bitmap scaling + + + + false + + + + pixelsize + pixelsize + + + + + + + false + + + false + + + true + + + + + pixelsizefixupfactor + 1.2 + + + pixelsizefixupfactor + 0.8 + + + + + + + true + + + 1.0 + + + + + + false + + + 1.0 + + + + matrix + + pixelsizefixupfactor 0 + 0 pixelsizefixupfactor + + + + + + size + pixelsizefixupfactor + + + + + diff --git a/fonts/conf.avail/10-sub-pixel-bgr.conf b/fonts/conf.avail/10-sub-pixel-bgr.conf new file mode 100644 index 0000000..241e589 --- /dev/null +++ b/fonts/conf.avail/10-sub-pixel-bgr.conf @@ -0,0 +1,19 @@ + + + + + + + + Enable sub-pixel rendering with the BGR stripes layout + + + + bgr + + diff --git a/fonts/conf.avail/10-sub-pixel-rgb.conf b/fonts/conf.avail/10-sub-pixel-rgb.conf new file mode 100644 index 0000000..1cb103d --- /dev/null +++ b/fonts/conf.avail/10-sub-pixel-rgb.conf @@ -0,0 +1,19 @@ + + + + + + + + Enable sub-pixel rendering with the RGB stripes layout + + + + rgb + + diff --git a/fonts/conf.avail/10-sub-pixel-vbgr.conf b/fonts/conf.avail/10-sub-pixel-vbgr.conf new file mode 100644 index 0000000..1a0690a --- /dev/null +++ b/fonts/conf.avail/10-sub-pixel-vbgr.conf @@ -0,0 +1,19 @@ + + + + + + + + Enable sub-pixel rendering with the vertical BGR stripes layout + + + + vbgr + + diff --git a/fonts/conf.avail/10-sub-pixel-vrgb.conf b/fonts/conf.avail/10-sub-pixel-vrgb.conf new file mode 100644 index 0000000..61bc663 --- /dev/null +++ b/fonts/conf.avail/10-sub-pixel-vrgb.conf @@ -0,0 +1,19 @@ + + + + + + + + Enable sub-pixel rendering with the vertical RGB stripes layout + + + + vrgb + + diff --git a/fonts/conf.avail/10-unhinted.conf b/fonts/conf.avail/10-unhinted.conf new file mode 100644 index 0000000..f92df0c --- /dev/null +++ b/fonts/conf.avail/10-unhinted.conf @@ -0,0 +1,19 @@ + + + + + + + + Disable hinting + + + + false + + diff --git a/fonts/conf.avail/11-lcdfilter-default.conf b/fonts/conf.avail/11-lcdfilter-default.conf new file mode 100644 index 0000000..929caaa --- /dev/null +++ b/fonts/conf.avail/11-lcdfilter-default.conf @@ -0,0 +1,21 @@ + + + + + + + + Use lcddefault as default for LCD filter + + + + + lcddefault + + + diff --git a/fonts/conf.avail/11-lcdfilter-legacy.conf b/fonts/conf.avail/11-lcdfilter-legacy.conf new file mode 100644 index 0000000..25c3635 --- /dev/null +++ b/fonts/conf.avail/11-lcdfilter-legacy.conf @@ -0,0 +1,21 @@ + + + + + + + + Use lcdlegacy as default for LCD filter + + + + + lcdlegacy + + + diff --git a/fonts/conf.avail/11-lcdfilter-light.conf b/fonts/conf.avail/11-lcdfilter-light.conf new file mode 100644 index 0000000..6f1eb3d --- /dev/null +++ b/fonts/conf.avail/11-lcdfilter-light.conf @@ -0,0 +1,21 @@ + + + + + + + + Use lcdlight as default for LCD filter + + + + + lcdlight + + + diff --git a/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf b/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf new file mode 100644 index 0000000..9036e83 --- /dev/null +++ b/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf @@ -0,0 +1,26 @@ + + + + + + + DejaVu LGC Sans Mono + + + 7.5 + + + false + + + diff --git a/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf b/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf new file mode 100644 index 0000000..35abebd --- /dev/null +++ b/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf @@ -0,0 +1,26 @@ + + + + + + + DejaVu LGC Sans + + + 7.5 + + + false + + + diff --git a/fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf b/fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf new file mode 100644 index 0000000..54486e8 --- /dev/null +++ b/fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf @@ -0,0 +1,26 @@ + + + + + + + DejaVu LGC Serif + + + 7.5 + + + false + + + diff --git a/fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf b/fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf new file mode 100644 index 0000000..102dbcc --- /dev/null +++ b/fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf @@ -0,0 +1,26 @@ + + + + + + + DejaVu Sans Mono + + + 7.5 + + + false + + + diff --git a/fonts/conf.avail/20-unhint-small-dejavu-sans.conf b/fonts/conf.avail/20-unhint-small-dejavu-sans.conf new file mode 100644 index 0000000..ee69996 --- /dev/null +++ b/fonts/conf.avail/20-unhint-small-dejavu-sans.conf @@ -0,0 +1,26 @@ + + + + + + + DejaVu Sans + + + 7.5 + + + false + + + diff --git a/fonts/conf.avail/20-unhint-small-dejavu-serif.conf b/fonts/conf.avail/20-unhint-small-dejavu-serif.conf new file mode 100644 index 0000000..cf6caa2 --- /dev/null +++ b/fonts/conf.avail/20-unhint-small-dejavu-serif.conf @@ -0,0 +1,26 @@ + + + + + + + DejaVu Serif + + + 7.5 + + + false + + + diff --git a/fonts/conf.avail/20-unhint-small-vera.conf b/fonts/conf.avail/20-unhint-small-vera.conf new file mode 100644 index 0000000..7b3d7bd --- /dev/null +++ b/fonts/conf.avail/20-unhint-small-vera.conf @@ -0,0 +1,53 @@ + + + + + + + + Disable hinting for Bitstream Vera fonts when the size is less than 8ppem + + + + + Bitstream Vera Sans + + + 7.5 + + + false + + + + + + Bitstream Vera Serif + + + 7.5 + + + false + + + + + + Bitstream Vera Sans Mono + + + 7.5 + + + false + + + + diff --git a/fonts/conf.avail/25-unhint-nonlatin.conf b/fonts/conf.avail/25-unhint-nonlatin.conf new file mode 100644 index 0000000..78cc7a3 --- /dev/null +++ b/fonts/conf.avail/25-unhint-nonlatin.conf @@ -0,0 +1,132 @@ + + + + + + + + Disable hinting for CJK fonts + + + + + Kochi Mincho + + + false + + + + + Kochi Gothic + + + false + + + + + Sazanami Mincho + + + false + + + + + Sazanami Gothic + + + false + + + + + Baekmuk Batang + + + false + + + + + Baekmuk Dotum + + + false + + + + + Baekmuk Gulim + + + false + + + + + Baekmuk Headline + + + false + + + + + AR PL Mingti2L Big5 + + + false + + + + + AR PL ShanHeiSun Uni + + + false + + + + + AR PL KaitiM Big5 + + + false + + + + + AR PL ZenKai Uni + + + false + + + + + AR PL SungtiL GB + + + false + + + + + AR PL KaitiM GB + + + false + + + + + ZYSong18030 + + + false + + + + diff --git a/fonts/conf.avail/30-cjk-aliases.conf b/fonts/conf.avail/30-cjk-aliases.conf new file mode 100644 index 0000000..497d2bf --- /dev/null +++ b/fonts/conf.avail/30-cjk-aliases.conf @@ -0,0 +1,569 @@ + + + + + + Batang + + Noto Serif CJK KR + NanumMyeongjo + UnBatang + + + + 바탕 + + Noto Serif CJK KR + NanumMyeongjo + UnBatang + + + + BatangChe + + Noto Serif CJK KR + NanumMyeongjo + UnBatang + + + + 바탕체 + + Noto Serif CJK KR + NanumMyeongjo + UnBatang + + + + Myeongjo + + Noto Serif CJK KR + NanumMyeongjo + UnBatang + + + + 명조 + + Noto Serif CJK KR + NanumMyeongjo + UnBatang + + + + MyeongjoChe + + Noto Serif CJK KR + NanumMyeongjo + UnBatang + + + + 명조체 + + Noto Serif CJK KR + NanumMyeongjo + UnBatang + + + + AR MingtiM KSC + + Noto Serif CJK KR + NanumMyeongjo + UnBatang + + + + Adobe 명조 Std M + + Noto Serif CJK KR + NanumMyeongjo + UnBatang + + + + Adobe Myeongjo Std M + + Noto Serif CJK KR + NanumMyeongjo + UnBatang + + + + Gungsuh + + Noto Serif CJK KR + UnGungseo + NanumMyeongjo + + + + 궁서 + + Noto Serif CJK KR + UnGungseo + NanumMyeongjo + + + + GungsuhChe + + Noto Serif CJK KR + UnGungseo + NanumMyeongjo + + + + 궁서체 + + Noto Serif CJK KR + UnGungseo + NanumMyeongjo + + + + Dotum + + Noto Sans CJK KR + NanumGothic + UnDotum + + + + 돋움 + + Noto Sans CJK KR + NanumGothic + UnDotum + + + + Gothic + + Noto Sans CJK KR + NanumGothic + UnDotum + + + + 고딕 + + Noto Sans CJK KR + NanumGothic + UnDotum + + + + Malgun Gothic + + Noto Sans CJK KR + NanumGothic + UnDotum + + + + 맑은 고딕 + + Noto Sans CJK KR + NanumGothic + UnDotum + + + + Gulim + + Noto Sans CJK KR + NanumGothic + UnDotum + + + + 굴림 + + Noto Sans CJK KR + NanumGothic + UnDotum + + + + AppleGothic + + Noto Sans CJK KR + NanumGothic + UnDotum + + + + 애플고딕 + + Noto Sans CJK KR + NanumGothic + UnDotum + + + + DotumChe + + Noto Sans Mono CJK KR + NanumGothicCoding + NanumGothic + + + + 돋움체 + + Noto Sans Mono CJK KR + NanumGothicCoding + NanumGothic + + + + GothicChe + + Noto Sans Mono CJK KR + NanumGothicCoding + NanumGothic + + + + 고딕체 + + Noto Sans Mono CJK KR + NanumGothicCoding + NanumGothic + + + + GulimChe + + Noto Sans Mono CJK KR + NanumGothicCoding + NanumGothic + + + + 굴림체 + + Noto Sans Mono CJK KR + NanumGothicCoding + NanumGothic + + + + + MS Gothic + + Noto Sans Mono CJK JP + TakaoGothic + IPAGothic + IPAMonaGothic + VL Gothic + Sazanami Gothic + Kochi Gothic + + + + ï¼­ï¼³ ゴシック + + Noto Sans Mono CJK JP + TakaoGothic + IPAGothic + IPAMonaGothic + VL Gothic + Sazanami Gothic + Kochi Gothic + + + + MS PGothic + + Noto Sans CJK JP + IPAMonaPGothic + TakaoPGothic + IPAPGothic + VL PGothic + Sazanami Gothic + Kochi Gothic + + + + ï¼­ï¼³ Pゴシック + + Noto Sans CJK JP + IPAMonaPGothic + TakaoPGothic + IPAPGothic + VL PGothic + Sazanami Gothic + Kochi Gothic + + + + MS UIGothic + + Noto Sans CJK JP + IPAMonaPGothic + TakaoPGothic + IPAPGothic + VL PGothic + Sazanami Gothic + Kochi Gothic + + + + Meiryo UI + + Noto Sans CJK JP + IPAMonaPGothic + TakaoPGothic + IPAPGothic + VL PGothic + Sazanami Gothic + Kochi Gothic + + + + MS Mincho + + Noto Serif CJK JP + TakaoMincho + IPAMincho + IPAMonaMincho + Sazanami Mincho + Kochi Mincho + + + + ï¼­ï¼³ 明朝 + + Noto Serif CJK JP + TakaoMincho + IPAMincho + IPAMonaMincho + Sazanami Mincho + Kochi Mincho + + + + AR MinchoL JIS + + Noto Serif CJK JP + TakaoMincho + IPAMincho + IPAMonaMincho + Sazanami Mincho + Kochi Mincho + + + + MS PMincho + + Noto Serif CJK JP + IPAMonaPMincho + TakaoPMincho + IPAPMincho + Sazanami Mincho + Kochi Mincho + + + + ï¼­ï¼³ P明朝 + + Noto Serif CJK JP + IPAMonaPMincho + TakaoPMincho + IPAPMincho + Sazanami Mincho + Kochi Mincho + + + + Meiryo + + IPAexGothic + + + + メイリオ + + IPAexGothic + + + + + SimSun + + Noto Serif CJK SC + HYSong + AR PL UMing CN + + + + NSimSun + + Noto Serif CJK SC + HYSong + AR PL UMing CN + + + + SimSun-18030 + + Noto Serif CJK SC + HYSong + AR PL UMing CN + + + + NSimSun-18030 + + Noto Serif CJK SC + HYSong + AR PL UMing CN + + + + 宋体 + + Noto Serif CJK SC + HYSong + AR PL UMing CN + + + + 新宋体 + + Noto Serif CJK SC + HYSong + AR PL UMing CN + + + + AR MingtiM GB + + Noto Serif CJK SC + HYSong + AR PL UMing CN + + + + KaiTi + + Noto Serif CJK SC + AR PL UKai CN + AR PL ZenKai Uni + + + + 楷体 + + Noto Serif CJK SC + AR PL UKai CN + AR PL ZenKai Uni + + + + Microsoft YaHei + + Noto Sans CJK SC + WenQuanYi Micro Hei + WenQuanYi Zen Hei + + + + 微软雅黑 + + Noto Sans CJK SC + WenQuanYi Micro Hei + WenQuanYi Zen Hei + + + + + MingLiU + + Noto Serif CJK TC + AR PL UMing TW + + + + 細明體 + + Noto Serif CJK TC + AR PL UMing TW + + + + PMingLiU + + Noto Serif CJK TC + AR PL UMing TW + + + + 新細明體 + + Noto Serif CJK TC + AR PL UMing TW + + + + AR MingtiM BIG-5 + + Noto Serif CJK TC + AR PL UMing TW + + + + DFKai\-SB + + Noto Serif CJK TC + AR PL UKai TW + AR PL ZenKai Uni + + + + 標楷體 + + Noto Serif CJK TC + AR PL UKai TW + AR PL ZenKai Uni + + + + Microsoft JhengHei + + Noto Sans CJK TC + WenQuanYi Micro Hei + WenQuanYi Zen Hei + + + + 微軟正黑體 + + Noto Sans CJK TC + WenQuanYi Micro Hei + WenQuanYi Zen Hei + + + + + Ming (for ISO10646) + + AR PL UMing HK + + + + MingLiU_HKSCS + + AR PL UMing HK + + + + 細明體_HKSCS + + AR PL UMing HK + + + diff --git a/fonts/conf.avail/30-metric-aliases.conf b/fonts/conf.avail/30-metric-aliases.conf new file mode 100644 index 0000000..147fde6 --- /dev/null +++ b/fonts/conf.avail/30-metric-aliases.conf @@ -0,0 +1,634 @@ + + + + + + + + Set substitutions for similar/metric-compatible families + + + + + + + + Nimbus Sans L + + Helvetica + + + + + Nimbus Sans + + Helvetica + + + + + TeX Gyre Heros + + Helvetica + + + + + Nimbus Sans Narrow + + Helvetica Narrow + + + + + TeX Gyre Heros Cn + + Helvetica Narrow + + + + + Nimbus Roman No9 L + + Times + + + + + Nimbus Roman + + Times + + + + + TeX Gyre Termes + + Times + + + + + Nimbus Mono L + + Courier + + + + + Nimbus Mono + + Courier + + + + + Nimbus Mono PS + + Courier + + + + + TeX Gyre Cursor + + Courier + + + + + Avant Garde + + ITC Avant Garde Gothic + + + + + URW Gothic L + + ITC Avant Garde Gothic + + + + + URW Gothic + + ITC Avant Garde Gothic + + + + + TeX Gyre Adventor + + ITC Avant Garde Gothic + + + + + Bookman + + ITC Bookman + + + + + URW Bookman L + + ITC Bookman + + + + + Bookman URW + + ITC Bookman + + + + + URW Bookman + + ITC Bookman + + + + + TeX Gyre Bonum + + ITC Bookman + + + + + Bookman Old Style + + ITC Bookman + + + + + Zapf Chancery + + ITC Zapf Chancery + + + + + URW Chancery L + + ITC Zapf Chancery + + + + + Chancery URW + + ITC Zapf Chancery + + + + + Z003 + + ITC Zapf Chancery + + + + + TeX Gyre Chorus + + ITC Zapf Chancery + + + + + URW Palladio L + + Palatino + + + + + Palladio URW + + Palatino + + + + + P052 + + Palatino + + + + + TeX Gyre Pagella + + Palatino + + + + + Palatino Linotype + + Palatino + + + + + Century Schoolbook L + + New Century Schoolbook + + + + + Century SchoolBook URW + + New Century Schoolbook + + + + + C059 + + New Century Schoolbook + + + + + TeX Gyre Schola + + New Century Schoolbook + + + + + Century Schoolbook + + New Century Schoolbook + + + + + + Arimo + + Arial + + + + + Liberation Sans + + Arial + + + + + Liberation Sans Narrow + + Arial Narrow + + + + + Albany + + Arial + + + + + Albany AMT + + Arial + + + + + Tinos + + Times New Roman + + + + + Liberation Serif + + Times New Roman + + + + + Thorndale + + Times New Roman + + + + + Thorndale AMT + + Times New Roman + + + + + Cousine + + Courier New + + + + + Liberation Mono + + Courier New + + + + + Cumberland + + Courier New + + + + + Cumberland AMT + + Courier New + + + + + Gelasio + + Georgia + + + + + Caladea + + Cambria + + + + + Carlito + + Calibri + + + + + SymbolNeu + + Symbol + + + + + + + + Helvetica + + Arial + + + + + Helvetica Narrow + + Arial Narrow + + + + + Times + + Times New Roman + + + + + Courier + + Courier New + + + + + + Arial + + Helvetica + + + + + Arial Narrow + + Helvetica Narrow + + + + + Times New Roman + + Times + + + + + Courier New + + Courier + + + + + + + + Helvetica + + TeX Gyre Heros + + + + + Helvetica Narrow + + TeX Gyre Heros Cn + + + + + Times + + TeX Gyre Termes + + + + + Courier + + TeX Gyre Cursor + + + + + ITC Avant Garde Gothic + + TeX Gyre Adventor + + + + + ITC Bookman + + Bookman Old Style + TeX Gyre Bonum + + + + + ITC Zapf Chancery + + TeX Gyre Chorus + + + + + Palatino + + Palatino Linotype + TeX Gyre Pagella + + + + + New Century Schoolbook + + Century Schoolbook + TeX Gyre Schola + + + + + + Arial + + Arimo + Liberation Sans + Albany + Albany AMT + + + + + Arial Narrow + + Liberation Sans Narrow + + + + + Times New Roman + + Tinos + Liberation Serif + Thorndale + Thorndale AMT + + + + + Courier New + + Cousine + Liberation Mono + Cumberland + Cumberland AMT + + + + + Georgia + + Gelasio + + + + + Cambria + + Caladea + + + + + Calibri + + Carlito + + + + + Symbol + + SymbolNeu + + + + diff --git a/fonts/conf.avail/40-nonlatin.conf b/fonts/conf.avail/40-nonlatin.conf new file mode 100644 index 0000000..a70a4ad --- /dev/null +++ b/fonts/conf.avail/40-nonlatin.conf @@ -0,0 +1,244 @@ + + + + + + + + Set substitutions for non-Latin fonts + + + + + Nazli + serif + + + Lotoos + serif + + + Mitra + serif + + + Ferdosi + serif + + + Badr + serif + + + Zar + serif + + + Titr + serif + + + Jadid + serif + + + Kochi Mincho + serif + + + AR PL SungtiL GB + serif + + + AR PL Mingti2L Big5 + serif + + + ï¼­ï¼³ 明朝 + serif + + + NanumMyeongjo + serif + + + UnBatang + serif + + + Baekmuk Batang + serif + + + MgOpen Canonica + serif + + + Sazanami Mincho + serif + + + AR PL ZenKai Uni + serif + + + ZYSong18030 + serif + + + FreeSerif + serif + + + SimSun + serif + + + + Arshia + sans-serif + + + Elham + sans-serif + + + Farnaz + sans-serif + + + Nasim + sans-serif + + + Sina + sans-serif + + + Roya + sans-serif + + + Koodak + sans-serif + + + Terafik + sans-serif + + + Kochi Gothic + sans-serif + + + AR PL KaitiM GB + sans-serif + + + AR PL KaitiM Big5 + sans-serif + + + ï¼­ï¼³ ゴシック + sans-serif + + + NanumGothic + sans-serif + + + UnDotum + sans-serif + + + Baekmuk Dotum + sans-serif + + + MgOpen Moderna + sans-serif + + + MgOpen Modata + sans-serif + + + MgOpen Cosmetica + sans-serif + + + Sazanami Gothic + sans-serif + + + AR PL ShanHeiSun Uni + sans-serif + + + ZYSong18030 + sans-serif + + + FreeSans + sans-serif + + + + NSimSun + monospace + + + ZYSong18030 + monospace + + + NanumGothicCoding + monospace + + + FreeMono + monospace + + + + + Homa + fantasy + + + Kamran + fantasy + + + Fantezi + fantasy + + + Tabassom + fantasy + + + + + IranNastaliq + cursive + + + Nafees Nastaleeq + cursive + + + diff --git a/fonts/conf.avail/45-generic.conf b/fonts/conf.avail/45-generic.conf new file mode 100644 index 0000000..e8d1978 --- /dev/null +++ b/fonts/conf.avail/45-generic.conf @@ -0,0 +1,136 @@ + + + + + + + + Set substitutions for emoji/math fonts + + + + + + + + Noto Color Emoji + emoji + + + Apple Color Emoji + emoji + + + Segoe UI Emoji + emoji + + + Twitter Color Emoji + emoji + + + EmojiOne Mozilla + emoji + + + + Emoji Two + emoji + + + Emoji One + emoji + + + + Noto Emoji + emoji + + + Android Emoji + emoji + + + + + + emoji + + + und-zsye + + + + + + und-zsye + + + emoji + + + + + emoji + + + + + + + + + XITS Math + math + + + STIX Two Math + math + + + Cambria Math + math + + + Latin Modern Math + math + + + Minion Math + math + + + Lucida Math + math + + + Asana Math + math + + + + + + math + + + und-zmth + + + + + + und-zmth + + + math + + + + + math + + + + + diff --git a/fonts/conf.avail/45-latin.conf b/fonts/conf.avail/45-latin.conf new file mode 100644 index 0000000..a9240b9 --- /dev/null +++ b/fonts/conf.avail/45-latin.conf @@ -0,0 +1,278 @@ + + + + + + + + Set substitutions for Latin fonts + + + + + Bitstream Vera Serif + serif + + + Cambria + serif + + + Constantia + serif + + + DejaVu Serif + serif + + + Elephant + serif + + + Garamond + serif + + + Georgia + serif + + + Liberation Serif + serif + + + Luxi Serif + serif + + + MS Serif + serif + + + Nimbus Roman No9 L + serif + + + Nimbus Roman + serif + + + Palatino Linotype + serif + + + Thorndale AMT + serif + + + Thorndale + serif + + + Times New Roman + serif + + + Times + serif + + + + Albany AMT + sans-serif + + + Albany + sans-serif + + + Arial Unicode MS + sans-serif + + + Arial + sans-serif + + + Bitstream Vera Sans + sans-serif + + + Britannic + sans-serif + + + Calibri + sans-serif + + + Candara + sans-serif + + + Century Gothic + sans-serif + + + Corbel + sans-serif + + + DejaVu Sans + sans-serif + + + Helvetica + sans-serif + + + Haettenschweiler + sans-serif + + + Liberation Sans + sans-serif + + + MS Sans Serif + sans-serif + + + Nimbus Sans L + sans-serif + + + Nimbus Sans + sans-serif + + + Luxi Sans + sans-serif + + + Tahoma + sans-serif + + + Trebuchet MS + sans-serif + + + Twentieth Century + sans-serif + + + Verdana + sans-serif + + + + Andale Mono + monospace + + + Bitstream Vera Sans Mono + monospace + + + Consolas + monospace + + + Courier New + monospace + + + Courier + monospace + + + Cumberland AMT + monospace + + + Cumberland + monospace + + + DejaVu Sans Mono + monospace + + + Fixedsys + monospace + + + Inconsolata + monospace + + + Liberation Mono + monospace + + + Luxi Mono + monospace + + + Nimbus Mono L + monospace + + + Nimbus Mono + monospace + + + Nimbus Mono PS + monospace + + + Terminal + monospace + + + + Bauhaus Std + fantasy + + + Cooper Std + fantasy + + + Copperplate Gothic Std + fantasy + + + Impact + fantasy + + + + Comic Sans MS + cursive + + + ITC Zapf Chancery Std + cursive + + + Zapfino + cursive + + + diff --git a/fonts/conf.avail/49-sansserif.conf b/fonts/conf.avail/49-sansserif.conf new file mode 100644 index 0000000..8b587b0 --- /dev/null +++ b/fonts/conf.avail/49-sansserif.conf @@ -0,0 +1,26 @@ + + + + + + + + Add sans-serif to the family when no generic name + + + + sans-serif + + + serif + + + monospace + + + sans-serif + + + diff --git a/fonts/conf.avail/50-user.conf b/fonts/conf.avail/50-user.conf new file mode 100644 index 0000000..681ed6d --- /dev/null +++ b/fonts/conf.avail/50-user.conf @@ -0,0 +1,20 @@ + + + + + + + + Load per-user customization files + + fontconfig/conf.d + fontconfig/fonts.conf + + ~/.fonts.conf.d + ~/.fonts.conf + diff --git a/fonts/conf.avail/51-local.conf b/fonts/conf.avail/51-local.conf new file mode 100644 index 0000000..885c357 --- /dev/null +++ b/fonts/conf.avail/51-local.conf @@ -0,0 +1,11 @@ + + + + + + + + Load local customization file + + local.conf + diff --git a/fonts/conf.avail/53-monospace-lcd-filter.conf b/fonts/conf.avail/53-monospace-lcd-filter.conf new file mode 100644 index 0000000..ca80195 --- /dev/null +++ b/fonts/conf.avail/53-monospace-lcd-filter.conf @@ -0,0 +1,36 @@ + + + + + + + + DejaVu Sans Mono + + + 12.0 + + + + lcdlegacy + + + hintfull + + + + + Bitstream Vera Sans Mono + + + 12.0 + + + + lcdlegacy + + + hintfull + + + diff --git a/fonts/conf.avail/57-dejavu-sans-mono.conf b/fonts/conf.avail/57-dejavu-sans-mono.conf new file mode 100644 index 0000000..cc42561 --- /dev/null +++ b/fonts/conf.avail/57-dejavu-sans-mono.conf @@ -0,0 +1,62 @@ + + + + + + + Bepa Mono + + DejaVu Sans Mono + + + + Bitstream Prima Sans Mono + + DejaVu Sans Mono + + + + Bitstream Vera Sans Mono + + DejaVu Sans Mono + + + + DejaVu LGC Sans Mono + + DejaVu Sans Mono + + + + Olwen Sans Mono + + DejaVu Sans Mono + + + + SUSE Sans Mono + + DejaVu Sans Mono + + + + + DejaVu Sans Mono + + monospace + + + + + monospace + + DejaVu Sans Mono + + + diff --git a/fonts/conf.avail/57-dejavu-sans.conf b/fonts/conf.avail/57-dejavu-sans.conf new file mode 100644 index 0000000..565cab5 --- /dev/null +++ b/fonts/conf.avail/57-dejavu-sans.conf @@ -0,0 +1,87 @@ + + + + + + + Arev Sans + + DejaVu Sans + + + + Bepa + + DejaVu Sans + + + + Bitstream Prima Sans + + DejaVu Sans + + + + Bitstream Vera Sans + + DejaVu Sans + + + + DejaVu LGC Sans + + DejaVu Sans + + + + Hunky Sans + + DejaVu Sans + + + + Olwen Sans + + DejaVu Sans + + + + SUSE Sans + + DejaVu Sans + + + + Verajja + + DejaVu Sans + + + + + VerajjaPDA + + DejaVu Sans + + + + + DejaVu Sans + + sans-serif + + + + + sans-serif + + DejaVu Sans + + + diff --git a/fonts/conf.avail/57-dejavu-serif.conf b/fonts/conf.avail/57-dejavu-serif.conf new file mode 100644 index 0000000..a922e9b --- /dev/null +++ b/fonts/conf.avail/57-dejavu-serif.conf @@ -0,0 +1,69 @@ + + + + + + + Bitstream Prima Serif + + DejaVu Serif + + + + Bitstream Vera Serif + + DejaVu Serif + + + + DejaVu LGC Serif + + DejaVu Serif + + + + Hunky Serif + + DejaVu Serif + + + + Olwen Serif + + DejaVu Serif + + + + SUSE Serif + + DejaVu Serif + + + + + Verajja Serif + + DejaVu Serif + + + + + DejaVu Serif + + serif + + + + + serif + + DejaVu Serif + + + diff --git a/fonts/conf.avail/58-dejavu-lgc-sans-mono.conf b/fonts/conf.avail/58-dejavu-lgc-sans-mono.conf new file mode 100644 index 0000000..9d0a8b2 --- /dev/null +++ b/fonts/conf.avail/58-dejavu-lgc-sans-mono.conf @@ -0,0 +1,62 @@ + + + + + + + Bepa Mono + + DejaVu LGC Sans Mono + + + + Bitstream Prima Sans Mono + + DejaVu LGC Sans Mono + + + + Bitstream Vera Sans Mono + + DejaVu LGC Sans Mono + + + + DejaVu Sans Mono + + DejaVu LGC Sans Mono + + + + Olwen Sans Mono + + DejaVu LGC Sans Mono + + + + SUSE Sans Mono + + DejaVu LGC Sans Mono + + + + + DejaVu LGC Sans Mono + + monospace + + + + + monospace + + DejaVu LGC Sans Mono + + + diff --git a/fonts/conf.avail/58-dejavu-lgc-sans.conf b/fonts/conf.avail/58-dejavu-lgc-sans.conf new file mode 100644 index 0000000..decd2a3 --- /dev/null +++ b/fonts/conf.avail/58-dejavu-lgc-sans.conf @@ -0,0 +1,87 @@ + + + + + + + Arev Sans + + DejaVu LGC Sans + + + + Bepa + + DejaVu LGC Sans + + + + Bitstream Prima Sans + + DejaVu LGC Sans + + + + Bitstream Vera Sans + + DejaVu LGC Sans + + + + DejaVu Sans + + DejaVu LGC Sans + + + + Hunky Sans + + DejaVu LGC Sans + + + + Olwen Sans + + DejaVu LGC Sans + + + + SUSE Sans + + DejaVu LGC Sans + + + + Verajja + + DejaVu LGC Sans + + + + + VerajjaPDA + + DejaVu LGC Sans + + + + + DejaVu LGC Sans + + sans-serif + + + + + sans-serif + + DejaVu LGC Sans + + + diff --git a/fonts/conf.avail/58-dejavu-lgc-serif.conf b/fonts/conf.avail/58-dejavu-lgc-serif.conf new file mode 100644 index 0000000..01045e8 --- /dev/null +++ b/fonts/conf.avail/58-dejavu-lgc-serif.conf @@ -0,0 +1,69 @@ + + + + + + + Bitstream Prima Serif + + DejaVu LGC Serif + + + + Bitstream Vera Serif + + DejaVu LGC Serif + + + + DejaVu Serif + + DejaVu LGC Serif + + + + Hunky Serif + + DejaVu LGC Serif + + + + Olwen Serif + + DejaVu LGC Serif + + + + SUSE Serif + + DejaVu LGC Serif + + + + + Verajja Serif + + DejaVu LGC Serif + + + + + DejaVu LGC Serif + + serif + + + + + serif + + DejaVu LGC Serif + + + diff --git a/fonts/conf.avail/60-generic.conf b/fonts/conf.avail/60-generic.conf new file mode 100644 index 0000000..be7b52b --- /dev/null +++ b/fonts/conf.avail/60-generic.conf @@ -0,0 +1,67 @@ + + + + + + + + Set preferable fonts for emoji/math fonts + + + + + + + + und-zsye + + + true + + + false + + + true + + + + + + emoji + + + Noto Color Emoji + Apple Color Emoji + Segoe UI Emoji + Twitter Color Emoji + EmojiOne Mozilla + + Emoji Two + Emoji One + + Noto Emoji + Android Emoji + + + + + + + math + + XITS Math + STIX Two Math + Cambria Math + Latin Modern Math + Minion Math + Lucida Math + Asana Math + + + + diff --git a/fonts/conf.avail/60-latin.conf b/fonts/conf.avail/60-latin.conf new file mode 100644 index 0000000..5c081e4 --- /dev/null +++ b/fonts/conf.avail/60-latin.conf @@ -0,0 +1,79 @@ + + + + + + + + Set preferable fonts for Latin + + serif + + DejaVu Serif + Bitstream Vera Serif + Times New Roman + Thorndale AMT + Luxi Serif + Nimbus Roman No9 L + Nimbus Roman + Times + + + + sans-serif + + DejaVu Sans + Bitstream Vera Sans + Verdana + Arial + Albany AMT + Luxi Sans + Nimbus Sans L + Nimbus Sans + Helvetica + Lucida Sans Unicode + BPG Glaho International + Tahoma + + + + monospace + + DejaVu Sans Mono + Bitstream Vera Sans Mono + Inconsolata + Andale Mono + Courier New + Cumberland AMT + Luxi Mono + Nimbus Mono L + Nimbus Mono + Nimbus Mono PS + Courier + + + + + fantasy + + Impact + Copperplate Gothic Std + Cooper Std + Bauhaus Std + + + + + cursive + + ITC Zapf Chancery Std + Zapfino + Comic Sans MS + + + + diff --git a/fonts/conf.avail/64-language-selector-prefer.conf b/fonts/conf.avail/64-language-selector-prefer.conf new file mode 100644 index 0000000..cdcc11e --- /dev/null +++ b/fonts/conf.avail/64-language-selector-prefer.conf @@ -0,0 +1,31 @@ + + + + + sans-serif + + Noto Sans CJK JP + Noto Sans CJK KR + Noto Sans CJK SC + Noto Sans CJK TC + + + + serif + + Noto Serif CJK JP + Noto Serif CJK KR + Noto Serif CJK SC + Noto Serif CJK TC + + + + monospace + + Noto Sans Mono CJK JP + Noto Sans Mono CJK KR + Noto Sans Mono CJK SC + Noto Sans Mono CJK TC + + + diff --git a/fonts/conf.avail/65-fonts-persian.conf b/fonts/conf.avail/65-fonts-persian.conf new file mode 100644 index 0000000..5591486 --- /dev/null +++ b/fonts/conf.avail/65-fonts-persian.conf @@ -0,0 +1,423 @@ + + + + + + + + + + + + + + + Nesf + Nesf2 + + + Nesf2 + Persian_sansserif_default + + + + + + Nazanin + Nazli + + + Lotus + Lotoos + + + Yaqut + Yaghoot + + + Yaghut + Yaghoot + + + Traffic + Terafik + + + Ferdowsi + Ferdosi + + + Fantezy + Fantezi + + + + + + + + Jadid + Persian_title + + + Titr + Persian_title + + + + + Kamran + + Persian_fantasy + Homa + + + + Homa + + Persian_fantasy + Kamran + + + + Fantezi + Persian_fantasy + + + Tabassom + Persian_fantasy + + + + + Arshia + Persian_square + + + Nasim + Persian_square + + + Elham + + Persian_square + Farnaz + + + + Farnaz + + Persian_square + Elham + + + + Sina + Persian_square + + + + + + + Persian_title + + Titr + Jadid + Persian_serif + + + + + + Persian_fantasy + + Homa + Kamran + Fantezi + Tabassom + Persian_square + + + + + + Persian_square + + Arshia + Elham + Farnaz + Nasim + Sina + Persian_serif + + + + + + + + Elham + + + farsiweb + + + + + + Homa + + + farsiweb + + + + + + Koodak + + + farsiweb + + + + + + Nazli + + + farsiweb + + + + + + Roya + + + farsiweb + + + + + + Terafik + + + farsiweb + + + + + + Titr + + + farsiweb + + + + + + + + + + TURNED-OFF + + + farsiweb + + + + roman + + + + roman + + + + + matrix + 1-0.2 + 01 + + + + + + oblique + + + + + + + + + farsiweb + + + false + + + false + + + false + + + + + + + + + serif + + Nazli + Lotoos + Mitra + Ferdosi + Badr + Zar + + + + + + sans-serif + + Roya + Koodak + Terafik + + + + + + monospace + + + Terafik + + + + + + fantasy + + Homa + Kamran + Fantezi + Tabassom + + + + + + cursive + + IranNastaliq + Nafees Nastaleeq + + + + + + + + + serif + + + 200 + + + 24 + + + Titr + + + + + + + sans-serif + + + 200 + + + 24 + + + Titr + + + + + + + Persian_sansserif_default + + + 200 + + + 24 + + + Titr + + + + + + + + + Persian_sansserif_default + + + Roya + + + + diff --git a/fonts/conf.avail/65-khmer.conf b/fonts/conf.avail/65-khmer.conf new file mode 100644 index 0000000..8985c0d --- /dev/null +++ b/fonts/conf.avail/65-khmer.conf @@ -0,0 +1,20 @@ + + + + + + + + + serif + + Khmer OS" + + + + sans-serif + + Khmer OS" + + + diff --git a/fonts/conf.avail/65-nonlatin.conf b/fonts/conf.avail/65-nonlatin.conf new file mode 100644 index 0000000..532218c --- /dev/null +++ b/fonts/conf.avail/65-nonlatin.conf @@ -0,0 +1,197 @@ + + + + + + + + Set preferable fonts for non-Latin + + serif + + Artsounk + BPG UTF8 M + Kinnari + Norasi + Frank Ruehl + Dror + JG LaoTimes + Saysettha Unicode + Pigiarniq + B Davat + B Compset + Kacst-Qr + Urdu Nastaliq Unicode + Raghindi + Mukti Narrow + padmaa + Hapax Berbère + MS Mincho + SimSun + PMingLiu + WenQuanYi Zen Hei + WenQuanYi Bitmap Song + AR PL ShanHeiSun Uni + AR PL New Sung + ZYSong18030 + HanyiSong + MgOpen Canonica + Sazanami Mincho + IPAMonaMincho + IPAMincho + Kochi Mincho + AR PL SungtiL GB + AR PL Mingti2L Big5 + AR PL Zenkai Uni + ï¼­ï¼³ 明朝 + ZYSong18030 + NanumMyeongjo + UnBatang + Baekmuk Batang + KacstQura + Frank Ruehl CLM + Lohit Bengali + Lohit Gujarati + Lohit Hindi + Lohit Marathi + Lohit Maithili + Lohit Kashmiri + Lohit Konkani + Lohit Nepali + Lohit Sindhi + Lohit Punjabi + Lohit Tamil + Rachana + Lohit Malayalam + Lohit Kannada + Lohit Telugu + Lohit Oriya + LKLUG + + + + sans-serif + + Nachlieli + Lucida Sans Unicode + Yudit Unicode + Kerkis + ArmNet Helvetica + Artsounk + BPG UTF8 M + Waree + Loma + Garuda + Umpush + Saysettha Unicode + JG Lao Old Arial + GF Zemen Unicode + Pigiarniq + B Davat + B Compset + Kacst-Qr + Urdu Nastaliq Unicode + Raghindi + Mukti Narrow + padmaa + Hapax Berbère + MS Gothic + UmePlus P Gothic + Microsoft YaHei + Microsoft JhengHei + WenQuanYi Zen Hei + WenQuanYi Bitmap Song + AR PL ShanHeiSun Uni + AR PL New Sung + MgOpen Moderna + MgOpen Modata + MgOpen Cosmetica + VL Gothic + IPAMonaGothic + IPAGothic + Sazanami Gothic + Kochi Gothic + AR PL KaitiM GB + AR PL KaitiM Big5 + AR PL ShanHeiSun Uni + AR PL SungtiL GB + AR PL Mingti2L Big5 + ï¼­ï¼³ ゴシック + ZYSong18030 + NanumGothic + UnDotum + Baekmuk Dotum + Baekmuk Gulim + KacstQura + Lohit Bengali + Lohit Gujarati + Lohit Hindi + Lohit Marathi + Lohit Maithili + Lohit Kashmiri + Lohit Konkani + Lohit Nepali + Lohit Sindhi + Lohit Punjabi + Lohit Tamil + Meera + Lohit Malayalam + Lohit Kannada + Lohit Telugu + Lohit Oriya + LKLUG + + + + monospace + + Miriam Mono + VL Gothic + IPAMonaGothic + IPAGothic + Sazanami Gothic + Kochi Gothic + AR PL KaitiM GB + MS Gothic + UmePlus Gothic + NSimSun + MingLiu + AR PL ShanHeiSun Uni + AR PL New Sung Mono + HanyiSong + AR PL SungtiL GB + AR PL Mingti2L Big5 + ZYSong18030 + NanumGothicCoding + NanumGothic + UnDotum + Baekmuk Dotum + Baekmuk Gulim + TlwgTypo + TlwgTypist + TlwgTypewriter + TlwgMono + Hasida + Mitra Mono + GF Zemen Unicode + Hapax Berbère + Lohit Bengali + Lohit Gujarati + Lohit Hindi + Lohit Marathi + Lohit Maithili + Lohit Kashmiri + Lohit Konkani + Lohit Nepali + Lohit Sindhi + Lohit Punjabi + Lohit Tamil + Meera + Lohit Malayalam + Lohit Kannada + Lohit Telugu + Lohit Oriya + LKLUG + + + diff --git a/fonts/conf.avail/69-language-selector-ja.conf b/fonts/conf.avail/69-language-selector-ja.conf new file mode 100644 index 0000000..216a1a6 --- /dev/null +++ b/fonts/conf.avail/69-language-selector-ja.conf @@ -0,0 +1,21 @@ + + + + + + Noto + + + JP + + + 18 + + + false + + + hintnone + + + diff --git a/fonts/conf.avail/69-language-selector-zh-cn.conf b/fonts/conf.avail/69-language-selector-zh-cn.conf new file mode 100644 index 0000000..254249a --- /dev/null +++ b/fonts/conf.avail/69-language-selector-zh-cn.conf @@ -0,0 +1,61 @@ + + + + + + + zh-cn + + + serif + + + Noto Serif CJK SC + HYSong + AR PL UMing CN + AR PL UMing HK + AR PL New Sung + WenQuanYi Bitmap Song + AR PL UKai CN + AR PL ZenKai Uni + + + + + sans-serif + + + zh-cn + + + Noto Sans CJK SC + WenQuanYi Zen Hei + HYSong + AR PL UMing CN + AR PL UMing HK + AR PL New Sung + AR PL UKai CN + AR PL ZenKai Uni + + + + + monospace + + + zh-cn + + + DejaVu Sans Mono + Noto Sans Mono CJK SC + WenQuanYi Zen Hei Mono + HYSong + AR PL UMing CN + AR PL UMing HK + AR PL New Sung + AR PL UKai CN + AR PL ZenKai Uni + + + + diff --git a/fonts/conf.avail/69-language-selector-zh-hk.conf b/fonts/conf.avail/69-language-selector-zh-hk.conf new file mode 100644 index 0000000..ee23e6d --- /dev/null +++ b/fonts/conf.avail/69-language-selector-zh-hk.conf @@ -0,0 +1,56 @@ + + + + + + + serif + + + zh-hk + + + Noto Serif CJK TC + AR PL UMing HK + AR PL New Sung + HYSong + WenQuanYi Bitmap Song + AR PL UKai HK + AR PL ZenKai Uni + + + + + sans-serif + + + zh-hk + + + Noto Sans CJK TC + AR PL UMing HK + AR PL New Sung + HYSong + AR PL UKai HK + AR PL ZenKai Uni + + + + + monospace + + + zh-hk + + + DejaVu Sans Mono + Noto Sans Mono CJK TC + AR PL UMing HK + AR PL New Sung + HYSong + AR PL UKai HK + AR PL ZenKai Uni + + + + diff --git a/fonts/conf.avail/69-language-selector-zh-mo.conf b/fonts/conf.avail/69-language-selector-zh-mo.conf new file mode 100644 index 0000000..57af177 --- /dev/null +++ b/fonts/conf.avail/69-language-selector-zh-mo.conf @@ -0,0 +1,58 @@ + + + + + + + serif + + + zh-mo + + + Noto Serif CJK TC + AR PL UMing HK + AR PL New Sung + HYSong + WenQuanYi Bitmap Song + AR PL UKai HK + AR PL ZenKai Uni + + + + + sans-serif + + + zh-mo + + + Bitstream Vera Sans + Noto Sans CJK TC + AR PL UMing HK + AR PL New Sung + HYSong + AR PL UKai HK + AR PL ZenKai Uni + + + + + monospace + + + zh-mo + + + Bitstream Vera Sans Mono + DejaVu Sans Mono + Noto Sans Mono CJK TC + AR PL UMing HK + AR PL New Sung + HYSong + AR PL UKai HK + AR PL ZenKai Uni + + + + diff --git a/fonts/conf.avail/69-language-selector-zh-sg.conf b/fonts/conf.avail/69-language-selector-zh-sg.conf new file mode 100644 index 0000000..13693e6 --- /dev/null +++ b/fonts/conf.avail/69-language-selector-zh-sg.conf @@ -0,0 +1,61 @@ + + + + + + + serif + + + zh-sg + + + Noto Serif CJK SC + HYSong + AR PL UMing CN + AR PL UMing HK + AR PL New Sung + WenQuanYi Bitmap Song + AR PL UKai CN + AR PL ZenKai Uni + + + + + sans-serif + + + zh-sg + + + Noto Sans CJK SC + WenQuanYi Zen Hei + HYSong + AR PL UMing CN + AR PL UMing HK + AR PL New Sung + AR PL UKai CN + AR PL ZenKai Uni + + + + + monospace + + + zh-sg + + + DejaVu Sans Mono + Noto Sans Mono CJK SC + WenQuanYi Zen Hei Mono + HYSong + AR PL UMing CN + AR PL UMing HK + AR PL New Sung + AR PL UKai CN + AR PL ZenKai Uni + + + + diff --git a/fonts/conf.avail/69-language-selector-zh-tw.conf b/fonts/conf.avail/69-language-selector-zh-tw.conf new file mode 100644 index 0000000..6cd0500 --- /dev/null +++ b/fonts/conf.avail/69-language-selector-zh-tw.conf @@ -0,0 +1,71 @@ + + + + + + + + serif + + + zh-tw + + + Noto Serif CJK TC + AR PL UMing TW + AR PL UMing HK + AR PL New Sung + HYSong + WenQuanYi Bitmap Song + AR PL UKai TW + AR PL UKai HK + AR PL ZenKai Uni + DejaVu Serif + Bitstream Vera Serif + + + + + sans-serif + + + zh-tw + + + Noto Sans CJK TC + WenQuanYi Zen Hei + AR PL UMing TW + AR PL UMing HK + AR PL New Sung + HYSong + AR PL UKai TW + AR PL UKai HK + AR PL ZenKai Uni + DejaVu Sans + Bitstream Vera Sans + + + + + monospace + + + zh-tw + + + DejaVu Sans Mono + Noto Sans Mono CJK TC + WenQuanYi Zen Hei Mono + AR PL UMing TW + AR PL UMing HK + AR PL New Sung + HYSong + AR PL UKai TW + AR PL UKai HK + AR PL ZenKai Uni + DejaVu Sans Mono + Bitstream Vera Sans Mono + + + + diff --git a/fonts/conf.avail/69-unifont.conf b/fonts/conf.avail/69-unifont.conf new file mode 100644 index 0000000..a3586f2 --- /dev/null +++ b/fonts/conf.avail/69-unifont.conf @@ -0,0 +1,32 @@ + + + + + + + + + serif + + FreeSerif + Code2000 + Code2001 + + + + sans-serif + + FreeSans + Arial Unicode MS + Arial Unicode + Code2000 + Code2001 + + + + monospace + + FreeMono + + + diff --git a/fonts/conf.avail/70-force-bitmaps.conf b/fonts/conf.avail/70-force-bitmaps.conf new file mode 100644 index 0000000..0c70a53 --- /dev/null +++ b/fonts/conf.avail/70-force-bitmaps.conf @@ -0,0 +1,17 @@ + + + + + + + + Accept bitmap fonts + + + + + false + + + + diff --git a/fonts/conf.avail/70-no-bitmaps.conf b/fonts/conf.avail/70-no-bitmaps.conf new file mode 100644 index 0000000..efb1bc0 --- /dev/null +++ b/fonts/conf.avail/70-no-bitmaps.conf @@ -0,0 +1,17 @@ + + + + + + + + Reject bitmap fonts + + + + + false + + + + diff --git a/fonts/conf.avail/70-yes-bitmaps.conf b/fonts/conf.avail/70-yes-bitmaps.conf new file mode 100644 index 0000000..1e4c10b --- /dev/null +++ b/fonts/conf.avail/70-yes-bitmaps.conf @@ -0,0 +1,3 @@ + + + diff --git a/fonts/conf.avail/80-delicious.conf b/fonts/conf.avail/80-delicious.conf new file mode 100644 index 0000000..8cd01f9 --- /dev/null +++ b/fonts/conf.avail/80-delicious.conf @@ -0,0 +1,23 @@ + + + + + + + + + + + + + Delicious + + + Heavy + + + heavy + + + + diff --git a/fonts/conf.avail/90-synthetic.conf b/fonts/conf.avail/90-synthetic.conf new file mode 100644 index 0000000..e344e4a --- /dev/null +++ b/fonts/conf.avail/90-synthetic.conf @@ -0,0 +1,68 @@ + + + + + + + + + + + + + roman + + + + roman + + + + + matrix + 10.2 + 01 + + + + + + oblique + + + + false + + + + + + + + + regular + + + + bold + + + + true + + + + bold + + + diff --git a/fonts/conf.avail/99-language-selector-zh.conf b/fonts/conf.avail/99-language-selector-zh.conf new file mode 100644 index 0000000..18e5f0c --- /dev/null +++ b/fonts/conf.avail/99-language-selector-zh.conf @@ -0,0 +1,69 @@ + + + + + + + Song + + + + 100 + + + 180 + + + true + + + + + + Sun + + + + 100 + + + 180 + + + true + + + + + + Kai + + + + 100 + + + 180 + + + true + + + + + + Ming + + + + 100 + + + 180 + + + true + + + + diff --git a/fonts/conf.d/10-antialias.conf b/fonts/conf.d/10-antialias.conf new file mode 120000 index 0000000..c0ef0f7 --- /dev/null +++ b/fonts/conf.d/10-antialias.conf @@ -0,0 +1 @@ +../conf.avail/10-antialias.conf \ No newline at end of file diff --git a/fonts/conf.d/10-hinting-slight.conf b/fonts/conf.d/10-hinting-slight.conf new file mode 120000 index 0000000..5488142 --- /dev/null +++ b/fonts/conf.d/10-hinting-slight.conf @@ -0,0 +1 @@ +../conf.avail/10-hinting-slight.conf \ No newline at end of file diff --git a/fonts/conf.d/10-scale-bitmap-fonts.conf b/fonts/conf.d/10-scale-bitmap-fonts.conf new file mode 120000 index 0000000..c3ca696 --- /dev/null +++ b/fonts/conf.d/10-scale-bitmap-fonts.conf @@ -0,0 +1 @@ +../conf.avail/10-scale-bitmap-fonts.conf \ No newline at end of file diff --git a/fonts/conf.d/11-lcdfilter-default.conf b/fonts/conf.d/11-lcdfilter-default.conf new file mode 120000 index 0000000..5269f93 --- /dev/null +++ b/fonts/conf.d/11-lcdfilter-default.conf @@ -0,0 +1 @@ +../conf.avail/11-lcdfilter-default.conf \ No newline at end of file diff --git a/fonts/conf.d/20-unhint-small-dejavu-lgc-sans-mono.conf b/fonts/conf.d/20-unhint-small-dejavu-lgc-sans-mono.conf new file mode 120000 index 0000000..068e8ea --- /dev/null +++ b/fonts/conf.d/20-unhint-small-dejavu-lgc-sans-mono.conf @@ -0,0 +1 @@ +../conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf \ No newline at end of file diff --git a/fonts/conf.d/20-unhint-small-dejavu-lgc-sans.conf b/fonts/conf.d/20-unhint-small-dejavu-lgc-sans.conf new file mode 120000 index 0000000..4c76710 --- /dev/null +++ b/fonts/conf.d/20-unhint-small-dejavu-lgc-sans.conf @@ -0,0 +1 @@ +../conf.avail/20-unhint-small-dejavu-lgc-sans.conf \ No newline at end of file diff --git a/fonts/conf.d/20-unhint-small-dejavu-lgc-serif.conf b/fonts/conf.d/20-unhint-small-dejavu-lgc-serif.conf new file mode 120000 index 0000000..1c8a107 --- /dev/null +++ b/fonts/conf.d/20-unhint-small-dejavu-lgc-serif.conf @@ -0,0 +1 @@ +../conf.avail/20-unhint-small-dejavu-lgc-serif.conf \ No newline at end of file diff --git a/fonts/conf.d/20-unhint-small-dejavu-sans-mono.conf b/fonts/conf.d/20-unhint-small-dejavu-sans-mono.conf new file mode 120000 index 0000000..e075245 --- /dev/null +++ b/fonts/conf.d/20-unhint-small-dejavu-sans-mono.conf @@ -0,0 +1 @@ +../conf.avail/20-unhint-small-dejavu-sans-mono.conf \ No newline at end of file diff --git a/fonts/conf.d/20-unhint-small-dejavu-sans.conf b/fonts/conf.d/20-unhint-small-dejavu-sans.conf new file mode 120000 index 0000000..61320a1 --- /dev/null +++ b/fonts/conf.d/20-unhint-small-dejavu-sans.conf @@ -0,0 +1 @@ +../conf.avail/20-unhint-small-dejavu-sans.conf \ No newline at end of file diff --git a/fonts/conf.d/20-unhint-small-dejavu-serif.conf b/fonts/conf.d/20-unhint-small-dejavu-serif.conf new file mode 120000 index 0000000..7abd5e1 --- /dev/null +++ b/fonts/conf.d/20-unhint-small-dejavu-serif.conf @@ -0,0 +1 @@ +../conf.avail/20-unhint-small-dejavu-serif.conf \ No newline at end of file diff --git a/fonts/conf.d/20-unhint-small-vera.conf b/fonts/conf.d/20-unhint-small-vera.conf new file mode 120000 index 0000000..56c5b8f --- /dev/null +++ b/fonts/conf.d/20-unhint-small-vera.conf @@ -0,0 +1 @@ +../conf.avail/20-unhint-small-vera.conf \ No newline at end of file diff --git a/fonts/conf.d/30-cjk-aliases.conf b/fonts/conf.d/30-cjk-aliases.conf new file mode 120000 index 0000000..81247d5 --- /dev/null +++ b/fonts/conf.d/30-cjk-aliases.conf @@ -0,0 +1 @@ +../conf.avail/30-cjk-aliases.conf \ No newline at end of file diff --git a/fonts/conf.d/30-metric-aliases.conf b/fonts/conf.d/30-metric-aliases.conf new file mode 120000 index 0000000..6809157 --- /dev/null +++ b/fonts/conf.d/30-metric-aliases.conf @@ -0,0 +1 @@ +../conf.avail/30-metric-aliases.conf \ No newline at end of file diff --git a/fonts/conf.d/40-nonlatin.conf b/fonts/conf.d/40-nonlatin.conf new file mode 120000 index 0000000..efb8230 --- /dev/null +++ b/fonts/conf.d/40-nonlatin.conf @@ -0,0 +1 @@ +../conf.avail/40-nonlatin.conf \ No newline at end of file diff --git a/fonts/conf.d/45-generic.conf b/fonts/conf.d/45-generic.conf new file mode 120000 index 0000000..1f25c2c --- /dev/null +++ b/fonts/conf.d/45-generic.conf @@ -0,0 +1 @@ +../conf.avail/45-generic.conf \ No newline at end of file diff --git a/fonts/conf.d/45-latin.conf b/fonts/conf.d/45-latin.conf new file mode 120000 index 0000000..c400905 --- /dev/null +++ b/fonts/conf.d/45-latin.conf @@ -0,0 +1 @@ +../conf.avail/45-latin.conf \ No newline at end of file diff --git a/fonts/conf.d/49-sansserif.conf b/fonts/conf.d/49-sansserif.conf new file mode 120000 index 0000000..0262faa --- /dev/null +++ b/fonts/conf.d/49-sansserif.conf @@ -0,0 +1 @@ +../conf.avail/49-sansserif.conf \ No newline at end of file diff --git a/fonts/conf.d/50-user.conf b/fonts/conf.d/50-user.conf new file mode 120000 index 0000000..967e33e --- /dev/null +++ b/fonts/conf.d/50-user.conf @@ -0,0 +1 @@ +../conf.avail/50-user.conf \ No newline at end of file diff --git a/fonts/conf.d/51-local.conf b/fonts/conf.d/51-local.conf new file mode 120000 index 0000000..58fc313 --- /dev/null +++ b/fonts/conf.d/51-local.conf @@ -0,0 +1 @@ +../conf.avail/51-local.conf \ No newline at end of file diff --git a/fonts/conf.d/57-dejavu-sans-mono.conf b/fonts/conf.d/57-dejavu-sans-mono.conf new file mode 120000 index 0000000..c0c1959 --- /dev/null +++ b/fonts/conf.d/57-dejavu-sans-mono.conf @@ -0,0 +1 @@ +../conf.avail/57-dejavu-sans-mono.conf \ No newline at end of file diff --git a/fonts/conf.d/57-dejavu-sans.conf b/fonts/conf.d/57-dejavu-sans.conf new file mode 120000 index 0000000..92a40d6 --- /dev/null +++ b/fonts/conf.d/57-dejavu-sans.conf @@ -0,0 +1 @@ +../conf.avail/57-dejavu-sans.conf \ No newline at end of file diff --git a/fonts/conf.d/57-dejavu-serif.conf b/fonts/conf.d/57-dejavu-serif.conf new file mode 120000 index 0000000..b7e7481 --- /dev/null +++ b/fonts/conf.d/57-dejavu-serif.conf @@ -0,0 +1 @@ +../conf.avail/57-dejavu-serif.conf \ No newline at end of file diff --git a/fonts/conf.d/58-dejavu-lgc-sans-mono.conf b/fonts/conf.d/58-dejavu-lgc-sans-mono.conf new file mode 120000 index 0000000..89ea6b2 --- /dev/null +++ b/fonts/conf.d/58-dejavu-lgc-sans-mono.conf @@ -0,0 +1 @@ +../conf.avail/58-dejavu-lgc-sans-mono.conf \ No newline at end of file diff --git a/fonts/conf.d/58-dejavu-lgc-sans.conf b/fonts/conf.d/58-dejavu-lgc-sans.conf new file mode 120000 index 0000000..ca377e0 --- /dev/null +++ b/fonts/conf.d/58-dejavu-lgc-sans.conf @@ -0,0 +1 @@ +../conf.avail/58-dejavu-lgc-sans.conf \ No newline at end of file diff --git a/fonts/conf.d/58-dejavu-lgc-serif.conf b/fonts/conf.d/58-dejavu-lgc-serif.conf new file mode 120000 index 0000000..603352a --- /dev/null +++ b/fonts/conf.d/58-dejavu-lgc-serif.conf @@ -0,0 +1 @@ +../conf.avail/58-dejavu-lgc-serif.conf \ No newline at end of file diff --git a/fonts/conf.d/60-generic.conf b/fonts/conf.d/60-generic.conf new file mode 120000 index 0000000..aba0e09 --- /dev/null +++ b/fonts/conf.d/60-generic.conf @@ -0,0 +1 @@ +../conf.avail/60-generic.conf \ No newline at end of file diff --git a/fonts/conf.d/60-latin.conf b/fonts/conf.d/60-latin.conf new file mode 120000 index 0000000..4827df3 --- /dev/null +++ b/fonts/conf.d/60-latin.conf @@ -0,0 +1 @@ +../conf.avail/60-latin.conf \ No newline at end of file diff --git a/fonts/conf.d/64-language-selector-prefer.conf b/fonts/conf.d/64-language-selector-prefer.conf new file mode 120000 index 0000000..95dbf21 --- /dev/null +++ b/fonts/conf.d/64-language-selector-prefer.conf @@ -0,0 +1 @@ +../conf.avail/64-language-selector-prefer.conf \ No newline at end of file diff --git a/fonts/conf.d/65-fonts-persian.conf b/fonts/conf.d/65-fonts-persian.conf new file mode 120000 index 0000000..7f72bfe --- /dev/null +++ b/fonts/conf.d/65-fonts-persian.conf @@ -0,0 +1 @@ +../conf.avail/65-fonts-persian.conf \ No newline at end of file diff --git a/fonts/conf.d/65-nonlatin.conf b/fonts/conf.d/65-nonlatin.conf new file mode 120000 index 0000000..d99e17a --- /dev/null +++ b/fonts/conf.d/65-nonlatin.conf @@ -0,0 +1 @@ +../conf.avail/65-nonlatin.conf \ No newline at end of file diff --git a/fonts/conf.d/69-language-selector-ja.conf b/fonts/conf.d/69-language-selector-ja.conf new file mode 120000 index 0000000..7136c20 --- /dev/null +++ b/fonts/conf.d/69-language-selector-ja.conf @@ -0,0 +1 @@ +../conf.avail/69-language-selector-ja.conf \ No newline at end of file diff --git a/fonts/conf.d/69-language-selector-zh-cn.conf b/fonts/conf.d/69-language-selector-zh-cn.conf new file mode 120000 index 0000000..609f792 --- /dev/null +++ b/fonts/conf.d/69-language-selector-zh-cn.conf @@ -0,0 +1 @@ +../conf.avail/69-language-selector-zh-cn.conf \ No newline at end of file diff --git a/fonts/conf.d/69-language-selector-zh-hk.conf b/fonts/conf.d/69-language-selector-zh-hk.conf new file mode 120000 index 0000000..ae709b8 --- /dev/null +++ b/fonts/conf.d/69-language-selector-zh-hk.conf @@ -0,0 +1 @@ +../conf.avail/69-language-selector-zh-hk.conf \ No newline at end of file diff --git a/fonts/conf.d/69-language-selector-zh-mo.conf b/fonts/conf.d/69-language-selector-zh-mo.conf new file mode 120000 index 0000000..4a4d83a --- /dev/null +++ b/fonts/conf.d/69-language-selector-zh-mo.conf @@ -0,0 +1 @@ +../conf.avail/69-language-selector-zh-mo.conf \ No newline at end of file diff --git a/fonts/conf.d/69-language-selector-zh-sg.conf b/fonts/conf.d/69-language-selector-zh-sg.conf new file mode 120000 index 0000000..f5b2881 --- /dev/null +++ b/fonts/conf.d/69-language-selector-zh-sg.conf @@ -0,0 +1 @@ +../conf.avail/69-language-selector-zh-sg.conf \ No newline at end of file diff --git a/fonts/conf.d/69-language-selector-zh-tw.conf b/fonts/conf.d/69-language-selector-zh-tw.conf new file mode 120000 index 0000000..977b8f3 --- /dev/null +++ b/fonts/conf.d/69-language-selector-zh-tw.conf @@ -0,0 +1 @@ +../conf.avail/69-language-selector-zh-tw.conf \ No newline at end of file diff --git a/fonts/conf.d/69-unifont.conf b/fonts/conf.d/69-unifont.conf new file mode 120000 index 0000000..7ba1b65 --- /dev/null +++ b/fonts/conf.d/69-unifont.conf @@ -0,0 +1 @@ +../conf.avail/69-unifont.conf \ No newline at end of file diff --git a/fonts/conf.d/70-no-bitmaps.conf b/fonts/conf.d/70-no-bitmaps.conf new file mode 120000 index 0000000..b2263fa --- /dev/null +++ b/fonts/conf.d/70-no-bitmaps.conf @@ -0,0 +1 @@ +../conf.avail/70-no-bitmaps.conf \ No newline at end of file diff --git a/fonts/conf.d/80-delicious.conf b/fonts/conf.d/80-delicious.conf new file mode 120000 index 0000000..22d6770 --- /dev/null +++ b/fonts/conf.d/80-delicious.conf @@ -0,0 +1 @@ +../conf.avail/80-delicious.conf \ No newline at end of file diff --git a/fonts/conf.d/90-synthetic.conf b/fonts/conf.d/90-synthetic.conf new file mode 120000 index 0000000..a25f312 --- /dev/null +++ b/fonts/conf.d/90-synthetic.conf @@ -0,0 +1 @@ +../conf.avail/90-synthetic.conf \ No newline at end of file diff --git a/fonts/conf.d/99-language-selector-zh.conf b/fonts/conf.d/99-language-selector-zh.conf new file mode 120000 index 0000000..23ec678 --- /dev/null +++ b/fonts/conf.d/99-language-selector-zh.conf @@ -0,0 +1 @@ +../conf.avail/99-language-selector-zh.conf \ No newline at end of file diff --git a/fonts/conf.d/README b/fonts/conf.d/README new file mode 100644 index 0000000..6a774c5 --- /dev/null +++ b/fonts/conf.d/README @@ -0,0 +1,23 @@ +conf.d/README + +Each file in this directory is a fontconfig configuration file. Fontconfig +scans this directory, loading all files of the form [0-9][0-9]*.conf. +These files are normally installed in /usr/share/fontconfig/conf.avail +and then symlinked here, allowing them to be easily installed and then +enabled/disabled by adjusting the symlinks. + +The files are loaded in numeric order, the structure of the configuration +has led to the following conventions in usage: + + Files begining with: Contain: + + 00 through 09 Font directories + 10 through 19 system rendering defaults (AA, etc) + 20 through 29 font rendering options + 30 through 39 family substitution + 40 through 49 generic identification, map family->generic + 50 through 59 alternate config file loading + 60 through 69 generic aliases, map generic->family + 70 through 79 select font (adjust which fonts are available) + 80 through 89 match target="scan" (modify scanned patterns) + 90 through 99 font synthesis diff --git a/fonts/fonts.conf b/fonts/fonts.conf new file mode 100644 index 0000000..e908e5a --- /dev/null +++ b/fonts/fonts.conf @@ -0,0 +1,108 @@ + + + + + + + + + Default configuration file + + + + + + /usr/share/fonts + /usr/X11R6/lib/X11/fonts /usr/local/share/fonts + fonts + + ~/.fonts + + + + + mono + + + monospace + + + + + + + sans serif + + + sans-serif + + + + + + + sans + + + sans-serif + + + + + + + *.dpkg-tmp + + + + + *.dpkg-new + + + + + conf.d + + + + /var/cache/fontconfig + fontconfig + + ~/.fontconfig + + + + + 30 + + + + diff --git a/fstab b/fstab new file mode 100644 index 0000000..b99692b --- /dev/null +++ b/fstab @@ -0,0 +1,12 @@ +# /etc/fstab: static file system information. +# +# Use 'blkid' to print the universally unique identifier for a +# device; this may be used with UUID= as a more robust way to name devices +# that works even if disks are added and removed. See fstab(5). +# +# +# / was on /dev/sda2 during installation +UUID=354d6752-65bd-4e4d-acf0-42e4c6897e73 / ext4 errors=remount-ro 0 0 +# /boot was on /dev/sda1 during installation +UUID=81642b62-d094-4945-922e-000c7c6de7a5 /boot ext4 defaults,noatime 0 0 +/swapfile none swap sw 0 0 diff --git a/fuse.conf b/fuse.conf new file mode 100644 index 0000000..ae194a0 --- /dev/null +++ b/fuse.conf @@ -0,0 +1,8 @@ +# /etc/fuse.conf - Configuration file for Filesystem in Userspace (FUSE) + +# Set the maximum number of FUSE mounts allowed to non-root users. +# The default is 1000. +#mount_max = 1000 + +# Allow non-root users to specify the allow_other or allow_root mount options. +#user_allow_other diff --git a/gai.conf b/gai.conf new file mode 100644 index 0000000..4616ed0 --- /dev/null +++ b/gai.conf @@ -0,0 +1,65 @@ +# Configuration for getaddrinfo(3). +# +# So far only configuration for the destination address sorting is needed. +# RFC 3484 governs the sorting. But the RFC also says that system +# administrators should be able to overwrite the defaults. This can be +# achieved here. +# +# All lines have an initial identifier specifying the option followed by +# up to two values. Information specified in this file replaces the +# default information. Complete absence of data of one kind causes the +# appropriate default information to be used. The supported commands include: +# +# reload +# If set to yes, each getaddrinfo(3) call will check whether this file +# changed and if necessary reload. This option should not really be +# used. There are possible runtime problems. The default is no. +# +# label +# Add another rule to the RFC 3484 label table. See section 2.1 in +# RFC 3484. The default is: +# +#label ::1/128 0 +#label ::/0 1 +#label 2002::/16 2 +#label ::/96 3 +#label ::ffff:0:0/96 4 +#label fec0::/10 5 +#label fc00::/7 6 +#label 2001:0::/32 7 +# +# This default differs from the tables given in RFC 3484 by handling +# (now obsolete) site-local IPv6 addresses and Unique Local Addresses. +# The reason for this difference is that these addresses are never +# NATed while IPv4 site-local addresses most probably are. Given +# the precedence of IPv6 over IPv4 (see below) on machines having only +# site-local IPv4 and IPv6 addresses a lookup for a global address would +# see the IPv6 be preferred. The result is a long delay because the +# site-local IPv6 addresses cannot be used while the IPv4 address is +# (at least for the foreseeable future) NATed. We also treat Teredo +# tunnels special. +# +# precedence +# Add another rule to the RFC 3484 precedence table. See section 2.1 +# and 10.3 in RFC 3484. The default is: +# +#precedence ::1/128 50 +#precedence ::/0 40 +#precedence 2002::/16 30 +#precedence ::/96 20 +#precedence ::ffff:0:0/96 10 +# +# For sites which prefer IPv4 connections change the last line to +# +#precedence ::ffff:0:0/96 100 + +# +# scopev4 +# Add another rule to the RFC 6724 scope table for IPv4 addresses. +# By default the scope IDs described in section 3.2 in RFC 6724 are +# used. Changing these defaults should hardly ever be necessary. +# The defaults are equivalent to: +# +#scopev4 ::ffff:169.254.0.0/112 2 +#scopev4 ::ffff:127.0.0.0/104 2 +#scopev4 ::ffff:0.0.0.0/96 14 diff --git a/groff/man.local b/groff/man.local new file mode 100644 index 0000000..0c5cd9a --- /dev/null +++ b/groff/man.local @@ -0,0 +1,33 @@ +.\" -*- nroff -*- +.\" +.\" This file is loaded after an-old.tmac. +.\" Put any local modifications to an-old.tmac here. +. +.if n \{\ +. \" Debian: Map \(oq to ' rather than ` in nroff mode for devices other +. \" than utf8. +. if !'\*[.T]'utf8' \ +. tr \[oq]' +. +. \" Debian: Disable the use of SGR (ANSI colour) escape sequences by +. \" grotty. +. if '\V[GROFF_SGR]'' \ +. output x X tty: sgr 0 +. +. \" Debian: Strictly, "-" is a hyphen while "\-" is a minus sign, and the +. \" former may not always be rendered in the form expected for things like +. \" command-line options. Uncomment this if you want to make sure that +. \" manual pages you're writing are clear of this problem. +. \" if '\*[.T]'utf8' \ +. \" char - \[hy] +. +. \" Debian: "\-" is more commonly used for option dashes than for minus +. \" signs in manual pages, so map it to plain "-" for HTML/XHTML output +. \" rather than letting it be rendered as "−". +. ie '\*[.T]'html' \ +. char \- \N'45' +. el \{\ +. if '\*[.T]'xhtml' \ +. char \- \N'45' +. \} +.\} diff --git a/groff/mdoc.local b/groff/mdoc.local new file mode 100644 index 0000000..c29fac8 --- /dev/null +++ b/groff/mdoc.local @@ -0,0 +1,33 @@ +.\" -*- nroff -*- +.\" +.\" This file is loaded after doc.tmac. +.\" Put any local modifications to doc.tmac here. +. +.if n \{\ +. \" Debian: Map \(oq to ' rather than ` in nroff mode for devices other +. \" than utf8. +. if !'\*[.T]'utf8' \ +. tr \[oq]' +. +. \" Debian: Disable the use of SGR (ANSI colour) escape sequences by +. \" grotty. +. if '\V[GROFF_SGR]'' \ +. output x X tty: sgr 0 +. +. \" Debian: Strictly, "-" is a hyphen while "\-" is a minus sign, and the +. \" former may not always be rendered in the form expected for things like +. \" command-line options. Uncomment this if you want to make sure that +. \" manual pages you're writing are clear of this problem. +. \" if '\*[.T]'utf8' \ +. \" char - \[hy] +. +. \" Debian: "\-" is more commonly used for option dashes than for minus +. \" signs in manual pages, so map it to plain "-" for HTML/XHTML output +. \" rather than letting it be rendered as "−". +. ie '\*[.T]'html' \ +. char \- \N'45' +. el \{\ +. if '\*[.T]'xhtml' \ +. char \- \N'45' +. \} +.\} diff --git a/group b/group new file mode 100644 index 0000000..fd7aa51 --- /dev/null +++ b/group @@ -0,0 +1,59 @@ +root:x:0: +daemon:x:1: +bin:x:2: +sys:x:3: +adm:x:4:syslog +tty:x:5: +disk:x:6: +lp:x:7: +mail:x:8: +news:x:9: +uucp:x:10: +man:x:12: +proxy:x:13: +kmem:x:15: +dialout:x:20: +fax:x:21: +voice:x:22: +cdrom:x:24: +floppy:x:25: +tape:x:26: +sudo:x:27: +audio:x:29: +dip:x:30: +www-data:x:33: +backup:x:34: +operator:x:37: +list:x:38: +irc:x:39: +src:x:40: +gnats:x:41: +shadow:x:42: +utmp:x:43: +video:x:44: +sasl:x:45: +plugdev:x:46: +staff:x:50: +games:x:60: +users:x:100: +nogroup:x:65534: +systemd-journal:x:101: +systemd-timesync:x:102: +systemd-network:x:103: +systemd-resolve:x:104: +input:x:105: +kvm:x:106: +crontab:x:107: +syslog:x:108: +messagebus:x:109: +mlocate:x:110: +uuidd:x:111: +ssh:x:112: +nobody:x:999: +systemd-coredump:x:998: +mysql:x:113: +ssl-cert:x:114: +bind:x:115: +borg:x:1000: +postfix:x:116: +postdrop:x:117: diff --git a/group- b/group- new file mode 100644 index 0000000..c93de4c --- /dev/null +++ b/group- @@ -0,0 +1,58 @@ +root:x:0: +daemon:x:1: +bin:x:2: +sys:x:3: +adm:x:4:syslog +tty:x:5: +disk:x:6: +lp:x:7: +mail:x:8: +news:x:9: +uucp:x:10: +man:x:12: +proxy:x:13: +kmem:x:15: +dialout:x:20: +fax:x:21: +voice:x:22: +cdrom:x:24: +floppy:x:25: +tape:x:26: +sudo:x:27: +audio:x:29: +dip:x:30: +www-data:x:33: +backup:x:34: +operator:x:37: +list:x:38: +irc:x:39: +src:x:40: +gnats:x:41: +shadow:x:42: +utmp:x:43: +video:x:44: +sasl:x:45: +plugdev:x:46: +staff:x:50: +games:x:60: +users:x:100: +nogroup:x:65534: +systemd-journal:x:101: +systemd-timesync:x:102: +systemd-network:x:103: +systemd-resolve:x:104: +input:x:105: +kvm:x:106: +crontab:x:107: +syslog:x:108: +messagebus:x:109: +mlocate:x:110: +uuidd:x:111: +ssh:x:112: +nobody:x:999: +systemd-coredump:x:998: +mysql:x:113: +ssl-cert:x:114: +bind:x:115: +borg:x:1000: +postfix:x:116: diff --git a/grub.d/00_header b/grub.d/00_header new file mode 100755 index 0000000..c627dbb --- /dev/null +++ b/grub.d/00_header @@ -0,0 +1,448 @@ +#! /bin/sh +set -e + +# grub-mkconfig helper script. +# Copyright (C) 2006,2007,2008,2009,2010 Free Software Foundation, Inc. +# +# GRUB is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# GRUB is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with GRUB. If not, see . + +prefix="/usr" +exec_prefix="/usr" +datarootdir="/usr/share" +grub_lang=`echo $LANG | cut -d . -f 1` +grubdir="`echo "/boot/grub" | sed 's,//*,/,g'`" +quick_boot="1" + +export TEXTDOMAIN=grub +export TEXTDOMAINDIR="${datarootdir}/locale" + +. "$pkgdatadir/grub-mkconfig_lib" + +# Do this as early as possible, since other commands might depend on it. +# (e.g. the `loadfont' command might need lvm or raid modules) +for i in ${GRUB_PRELOAD_MODULES} ; do + echo "insmod $i" +done + +if [ "x${GRUB_DEFAULT}" = "x" ] ; then GRUB_DEFAULT=0 ; fi +if [ "x${GRUB_DEFAULT}" = "xsaved" ] ; then GRUB_DEFAULT='${saved_entry}' ; fi +if [ "x${GRUB_TIMEOUT}" = "x" ] ; then GRUB_TIMEOUT=5 ; fi +if [ "x${GRUB_GFXMODE}" = "x" ] ; then GRUB_GFXMODE=auto ; fi + +if [ "x${GRUB_DEFAULT_BUTTON}" = "x" ] ; then GRUB_DEFAULT_BUTTON="$GRUB_DEFAULT" ; fi +if [ "x${GRUB_DEFAULT_BUTTON}" = "xsaved" ] ; then GRUB_DEFAULT_BUTTON='${saved_entry}' ; fi +if [ "x${GRUB_TIMEOUT_BUTTON}" = "x" ] ; then GRUB_TIMEOUT_BUTTON="$GRUB_TIMEOUT" ; fi + +cat << EOF +if [ -s \$prefix/grubenv ]; then + set have_grubenv=true + load_env +fi +EOF +cat < /dev/null ; then + font_path="${path}" + else + continue + fi + break 2 + done + done + if [ -n "${font_path}" ] ; then + cat << EOF +if [ x\$feature_default_font_path = xy ] ; then + font=unicode +else +EOF + # Make the font accessible + prepare_grub_to_access_device `${grub_probe} --target=device "${font_path}"` + cat << EOF + font="`make_system_path_relative_to_its_root "${font_path}"`" +fi + +if loadfont \$font ; then +EOF + else + cat << EOF +if loadfont unicode ; then +EOF + fi + fi + + cat << EOF + set gfxmode=${GRUB_GFXMODE} + load_video + insmod gfxterm +EOF + +# Gettext variables and module +if [ "x${LANG}" != "xC" ] && [ "x${LANG}" != "x" ]; then + cat << EOF + set locale_dir=\$prefix/locale + set lang=${grub_lang} + insmod gettext +EOF +fi + +cat <&2 + + prepare_grub_to_access_device `${grub_probe} --target=device "$GRUB_THEME"` + cat << EOF +insmod gfxmenu +EOF + themedir="`dirname "$GRUB_THEME"`" + for x in "$themedir"/*.pf2 "$themedir"/f/*.pf2; do + if [ -f "$x" ]; then + cat << EOF +loadfont (\$root)`make_system_path_relative_to_its_root $x` +EOF + fi + done + if [ x"`echo "$themedir"/*.jpg`" != x"$themedir/*.jpg" ] || [ x"`echo "$themedir"/*.jpeg`" != x"$themedir/*.jpeg" ]; then + cat << EOF +insmod jpeg +EOF + fi + if [ x"`echo "$themedir"/*.png`" != x"$themedir/*.png" ]; then + cat << EOF +insmod png +EOF + fi + if [ x"`echo "$themedir"/*.tga`" != x"$themedir/*.tga" ]; then + cat << EOF +insmod tga +EOF + fi + + cat << EOF +set theme=(\$root)`make_system_path_relative_to_its_root $GRUB_THEME` +export theme +EOF + elif [ "x$GRUB_BACKGROUND" != x ] && [ -f "$GRUB_BACKGROUND" ] \ + && is_path_readable_by_grub "$GRUB_BACKGROUND"; then + gettext_printf "Found background: %s\n" "$GRUB_BACKGROUND" >&2 + case "$GRUB_BACKGROUND" in + *.png) reader=png ;; + *.tga) reader=tga ;; + *.jpg|*.jpeg) reader=jpeg ;; + *) gettext "Unsupported image format" >&2; echo >&2; exit 1 ;; + esac + prepare_grub_to_access_device `${grub_probe} --target=device "$GRUB_BACKGROUND"` + cat << EOF +insmod $reader +background_image -m stretch `make_system_path_relative_to_its_root "$GRUB_BACKGROUND"` +EOF + fi +fi + +make_timeout () +{ + cat << EOF +if [ "\${recordfail}" = 1 ] ; then + set timeout=${GRUB_RECORDFAIL_TIMEOUT:-30} +else +EOF + if [ "x${3}" != "x" ] ; then + timeout="${2}" + style="${3}" + elif [ "x${1}" != "x" ] && \ + ([ "$quick_boot" = 1 ] || [ "x${1}" != "x0" ]) ; then + # Handle the deprecated GRUB_HIDDEN_TIMEOUT scheme. + timeout="${1}" + if [ "x${2}" != "x0" ] ; then + grub_warn "$(gettext "Setting GRUB_TIMEOUT to a non-zero value when GRUB_HIDDEN_TIMEOUT is set is no longer supported.")" + fi + if [ "x${GRUB_HIDDEN_TIMEOUT_QUIET}" = "xtrue" ] ; then + style="hidden" + verbose= + else + style="countdown" + verbose=" --verbose" + fi + else + # No hidden timeout, so treat as GRUB_TIMEOUT_STYLE=menu + timeout="${2}" + style="menu" + fi + cat << EOF + if [ x\$feature_timeout_style = xy ] ; then + set timeout_style=${style} + set timeout=${timeout} +EOF + if [ "x${style}" = "xmenu" ] ; then + cat << EOF + # Fallback normal timeout code in case the timeout_style feature is + # unavailable. + else + set timeout=${timeout} +EOF + else + cat << EOF + # Fallback hidden-timeout code in case the timeout_style feature is + # unavailable. + elif sleep${verbose} --interruptible ${timeout} ; then + set timeout=0 +EOF + fi + cat << EOF + fi +fi +EOF +if [ "$recordfail_broken" = 1 ]; then + cat << EOF +if [ \$grub_platform = efi ]; then + set timeout=${GRUB_RECORDFAIL_TIMEOUT:-30} + if [ x\$feature_timeout_style = xy ] ; then + set timeout_style=menu + fi +fi +EOF +fi +} + +if [ "x$GRUB_BUTTON_CMOS_ADDRESS" != "x" ]; then + cat < +# +# GRUB is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# GRUB is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with GRUB. If not, see . + +# Include the GRUB helper library for grub-mkconfig. +. /usr/share/grub/grub-mkconfig_lib + +# We want to work in /boot/grub/ only. +test -d /boot/grub; cd /boot/grub + +# Set the location of a possibly necessary cache file for the background image. +# NOTE: This MUST BE A DOTFILE to avoid confusing it with user-defined images. +BACKGROUND_CACHE=".background_cache" + +set_default_theme(){ + case $GRUB_DISTRIBUTOR in + Tanglu|Ubuntu|Kubuntu) + # Set a monochromatic theme for Tanglu/Ubuntu. + echo "${1}set menu_color_normal=white/black" + echo "${1}set menu_color_highlight=black/light-gray" + + if [ -e /usr/share/plymouth/themes/default.grub ]; then + sed "s/^/${1}/" /usr/share/plymouth/themes/default.grub + fi + # For plymouth backward compatiblity. Can be removed + # after xenial. + if [ -e /lib/plymouth/themes/default.grub ]; then + sed "s/^/${1}/" /lib/plymouth/themes/default.grub + fi + ;; + *) + # Set the traditional Debian blue theme. + echo "${1}set menu_color_normal=cyan/blue" + echo "${1}set menu_color_highlight=white/blue" + ;; + esac +} + +module_available(){ + local module + for module in "${1}.mod" */"${1}.mod"; do + if [ -f "${module}" ]; then + return 0 + fi + done + return 1 +} + +set_background_image(){ + # Step #1: Search all available output modes ... + local output + for output in ${GRUB_TERMINAL_OUTPUT}; do + if [ "x$output" = "xgfxterm" ]; then + break + fi + done + + # ... and check if we are able to display a background image at all. + if ! [ "x${output}" = "xgfxterm" ]; then + return 1 + fi + + # Step #2: Check if the specified background image exists. + if ! [ -f "${1}" ]; then + return 2 + fi + + # Step #3: Search the correct GRUB module for our background image. + local reader + case "${1}" in + *.jpg|*.JPG|*.jpeg|*.JPEG) reader="jpeg";; + *.png|*.PNG) reader="png";; + *.tga|*.TGA) reader="tga";; + *) return 3;; # Unknown image type. + esac + + # Step #4: Check if the necessary GRUB module is available. + if ! module_available "${reader}"; then + return 4 + fi + + # Step #5: Check if GRUB can read the background image directly. + # If so, we can remove the cache file (if any). Otherwise the backgound + # image needs to be cached under /boot/grub/. + if is_path_readable_by_grub "${1}"; then + rm --force "${BACKGROUND_CACHE}.jpeg" \ + "${BACKGROUND_CACHE}.png" "${BACKGROUND_CACHE}.tga" + elif cp "${1}" "${BACKGROUND_CACHE}.${reader}"; then + set -- "${BACKGROUND_CACHE}.${reader}" "${2}" "${3}" + else + return 5 + fi + + # Step #6: Prepare GRUB to read the background image. + if ! prepare_grub_to_access_device "`${grub_probe} --target=device "${1}"`"; then + return 6 + fi + + # Step #7: Everything went fine, print out a message to stderr ... + echo "Found background image: ${1}" >&2 + + # ... and write our configuration snippet to stdout. Use the colors + # desktop-base specified. If we're using a user-defined background, use + # the default colors since we've got no idea how the image looks like. + # If loading the background image fails, use the default theme. + echo "insmod ${reader}" + echo "if background_image `make_system_path_relative_to_its_root "${1}"`; then" + if [ -n "${2}" ]; then + echo " set color_normal=${2}" + fi + if [ -n "${3}" ]; then + echo " set color_highlight=${3}" + fi + if [ -z "${2}" ] && [ -z "${3}" ]; then + echo " true" + fi + echo "else" + set_default_theme " " + echo "fi" +} + +# Earlier versions of grub-pc copied the default background image to /boot/grub +# during postinst. Remove those obsolete images if they haven't been touched by +# the user. They are still available under /usr/share/images/desktop-base/ if +# desktop-base is installed. +while read checksum background; do + if [ -f "${background}" ] && [ "x`sha1sum "${background}"`" = "x${checksum} ${background}" ]; then + echo "Removing old background image: ${background}" >&2 + rm "${background}" + fi +done <. + +prefix="/usr" +exec_prefix="/usr" +datarootdir="/usr/share" +ubuntu_recovery="1" +quiet_boot="1" +quick_boot="1" +gfxpayload_dynamic="1" +vt_handoff="1" + +. "$pkgdatadir/grub-mkconfig_lib" + +export TEXTDOMAIN=grub +export TEXTDOMAINDIR="${datarootdir}/locale" + +CLASS="--class gnu-linux --class gnu --class os" +SUPPORTED_INITS="sysvinit:/lib/sysvinit/init systemd:/lib/systemd/systemd upstart:/sbin/upstart" + +if [ "x${GRUB_DISTRIBUTOR}" = "x" ] ; then + OS=GNU/Linux +else + case ${GRUB_DISTRIBUTOR} in + Ubuntu|Kubuntu) + OS="${GRUB_DISTRIBUTOR}" + ;; + *) + OS="${GRUB_DISTRIBUTOR} GNU/Linux" + ;; + esac + CLASS="--class $(echo ${GRUB_DISTRIBUTOR} | tr 'A-Z' 'a-z' | cut -d' ' -f1|LC_ALL=C sed 's,[^[:alnum:]_],_,g') ${CLASS}" +fi + +# loop-AES arranges things so that /dev/loop/X can be our root device, but +# the initrds that Linux uses don't like that. +case ${GRUB_DEVICE} in + /dev/loop/*|/dev/loop[0-9]) + GRUB_DEVICE=`losetup ${GRUB_DEVICE} | sed -e "s/^[^(]*(\([^)]\+\)).*/\1/"` + # We can't cope with devices loop-mounted from files here. + case ${GRUB_DEVICE} in + /dev/*) ;; + *) exit 0 ;; + esac + ;; +esac + +# btrfs may reside on multiple devices. We cannot pass them as value of root= parameter +# and mounting btrfs requires user space scanning, so force UUID in this case. +if [ "x${GRUB_DEVICE_UUID}" = "x" ] || [ "x${GRUB_DISABLE_LINUX_UUID}" = "xtrue" ] \ + || ! test -e "/dev/disk/by-uuid/${GRUB_DEVICE_UUID}" \ + || ( test -e "${GRUB_DEVICE}" && uses_abstraction "${GRUB_DEVICE}" lvm ); then + LINUX_ROOT_DEVICE=${GRUB_DEVICE} +else + LINUX_ROOT_DEVICE=UUID=${GRUB_DEVICE_UUID} +fi + +case x"$GRUB_FS" in + xbtrfs) + rootsubvol="`make_system_path_relative_to_its_root /`" + rootsubvol="${rootsubvol#/}" + if [ "x${rootsubvol}" != x ]; then + GRUB_CMDLINE_LINUX="rootflags=subvol=${rootsubvol} ${GRUB_CMDLINE_LINUX}" + fi;; + xzfs) + rpool=`${grub_probe} --device ${GRUB_DEVICE} --target=fs_label 2>/dev/null || true` + bootfs="`make_system_path_relative_to_its_root / | sed -e "s,@$,,"`" + LINUX_ROOT_DEVICE="ZFS=${rpool}${bootfs}" + ;; +esac + +title_correction_code= + +if [ -x /lib/recovery-mode/recovery-menu ]; then + GRUB_CMDLINE_LINUX_RECOVERY=recovery +else + GRUB_CMDLINE_LINUX_RECOVERY=single +fi +if [ "$ubuntu_recovery" = 1 ]; then + GRUB_CMDLINE_LINUX_RECOVERY="$GRUB_CMDLINE_LINUX_RECOVERY nomodeset" +fi + +if [ "$vt_handoff" = 1 ]; then + for word in $GRUB_CMDLINE_LINUX_DEFAULT; do + if [ "$word" = splash ]; then + GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT \$vt_handoff" + fi + done +fi + +if [ x"$GRUB_FORCE_PARTUUID" != x ]; then + echo "set partuuid=${GRUB_FORCE_PARTUUID}" +fi + +linux_entry () +{ + os="$1" + version="$2" + type="$3" + args="$4" + + if [ -z "$boot_device_id" ]; then + boot_device_id="$(grub_get_device_id "${GRUB_DEVICE}")" + fi + if [ x$type != xsimple ] ; then + case $type in + recovery) + title="$(gettext_printf "%s, with Linux %s (%s)" "${os}" "${version}" "$(gettext "${GRUB_RECOVERY_TITLE}")")" ;; + init-*) + title="$(gettext_printf "%s, with Linux %s (%s)" "${os}" "${version}" "${type#init-}")" ;; + *) + title="$(gettext_printf "%s, with Linux %s" "${os}" "${version}")" ;; + esac + if [ x"$title" = x"$GRUB_ACTUAL_DEFAULT" ] || [ x"Previous Linux versions>$title" = x"$GRUB_ACTUAL_DEFAULT" ]; then + replacement_title="$(echo "Advanced options for ${OS}" | sed 's,>,>>,g')>$(echo "$title" | sed 's,>,>>,g')" + quoted="$(echo "$GRUB_ACTUAL_DEFAULT" | grub_quote)" + title_correction_code="${title_correction_code}if [ \"x\$default\" = '$quoted' ]; then default='$(echo "$replacement_title" | grub_quote)'; fi;" + grub_warn "$(gettext_printf "Please don't use old title \`%s' for GRUB_DEFAULT, use \`%s' (for versions before 2.00) or \`%s' (for 2.00 or later)" "$GRUB_ACTUAL_DEFAULT" "$replacement_title" "gnulinux-advanced-$boot_device_id>gnulinux-$version-$type-$boot_device_id")" + fi + echo "menuentry '$(echo "$title" | grub_quote)' ${CLASS} \$menuentry_id_option 'gnulinux-$version-$type-$boot_device_id' {" | sed "s/^/$submenu_indentation/" + else + echo "menuentry '$(echo "$os" | grub_quote)' ${CLASS} \$menuentry_id_option 'gnulinux-simple-$boot_device_id' {" | sed "s/^/$submenu_indentation/" + fi + if [ "$quick_boot" = 1 ]; then + echo " recordfail" | sed "s/^/$submenu_indentation/" + fi + if [ x$type != xrecovery ] ; then + save_default_entry | grub_add_tab + fi + + # Use ELILO's generic "efifb" when it's known to be available. + # FIXME: We need an interface to select vesafb in case efifb can't be used. + if [ "x$GRUB_GFXPAYLOAD_LINUX" = x ]; then + echo " load_video" | sed "s/^/$submenu_indentation/" + else + if [ "x$GRUB_GFXPAYLOAD_LINUX" != xtext ]; then + echo " load_video" | sed "s/^/$submenu_indentation/" + fi + fi + if ([ "$ubuntu_recovery" = 0 ] || [ x$type != xrecovery ]) && \ + ([ "x$GRUB_GFXPAYLOAD_LINUX" != x ] || [ "$gfxpayload_dynamic" = 1 ]); then + echo " gfxmode \$linux_gfx_mode" | sed "s/^/$submenu_indentation/" + fi + + echo " insmod gzio" | sed "s/^/$submenu_indentation/" + echo " if [ x\$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi" | sed "s/^/$submenu_indentation/" + + if [ x$dirname = x/ ]; then + if [ -z "${prepare_root_cache}" ]; then + prepare_root_cache="$(prepare_grub_to_access_device ${GRUB_DEVICE} | grub_add_tab)" + fi + printf '%s\n' "${prepare_root_cache}" | sed "s/^/$submenu_indentation/" + else + if [ -z "${prepare_boot_cache}" ]; then + prepare_boot_cache="$(prepare_grub_to_access_device ${GRUB_DEVICE_BOOT} | grub_add_tab)" + fi + printf '%s\n' "${prepare_boot_cache}" | sed "s/^/$submenu_indentation/" + fi + if [ x"$quiet_boot" = x0 ] || [ x"$type" != xsimple ]; then + message="$(gettext_printf "Loading Linux %s ..." ${version})" + sed "s/^/$submenu_indentation/" << EOF + echo '$(echo "$message" | grub_quote)' +EOF + fi + if test -d /sys/firmware/efi && test -e "${linux}.efi.signed"; then + sed "s/^/$submenu_indentation/" << EOF + linux ${rel_dirname}/${basename}.efi.signed root=${linux_root_device_thisversion} ro ${args} +EOF + else + # We have initrd and PARTUUID is set - we try to boot without initrd, and fallback to using it + # if it fails. + # "panic=-1" means "on panic reboot immediately". "panic=0" disables the reboot behavior. + if [ x"$GRUB_FORCE_PARTUUID" != x ]; then + linux_root_device_thisversion="PARTUUID=${GRUB_FORCE_PARTUUID}" + fi + message="$(gettext_printf "Loading initial ramdisk ...")" + if test -n "${initrd}" && [ x"$GRUB_FORCE_PARTUUID" != x ]; then + sed "s/^/$submenu_indentation/" << EOF + if [ "\${initrdfail}" = 1 ]; then + linux ${rel_dirname}/${basename} root=${linux_root_device_thisversion} ro ${args} +EOF + if [ x"$quiet_boot" = x0 ] || [ x"$type" != xsimple ]; then + sed "s/^/$submenu_indentation/" << EOF + echo '$(echo "$message" | grub_quote)' +EOF + fi + + sed "s/^/$submenu_indentation/" << EOF + initrd ${rel_dirname}/${initrd} + else + linux ${rel_dirname}/${basename} root=${linux_root_device_thisversion} ro ${args} panic=-1 + fi + initrdfail +EOF + else + # We don't have initrd or we don't want to set PARTUUID. Don't try initrd-less boot with fallback. + sed "s/^/$submenu_indentation/" << EOF + linux ${rel_dirname}/${basename} root=${linux_root_device_thisversion} ro ${args} +EOF + if test -n "${initrd}"; then + # We do have initrd - let's use it at boot. + # TRANSLATORS: ramdisk isn't identifier. Should be translated. + if [ x"$quiet_boot" = x0 ] || [ x"$type" != xsimple ]; then + sed "s/^/$submenu_indentation/" << EOF + echo '$(echo "$message" | grub_quote)' +EOF + fi + sed "s/^/$submenu_indentation/" << EOF + initrd ${rel_dirname}/${initrd} +EOF + fi + fi + fi + sed "s/^/$submenu_indentation/" << EOF +} +EOF +} + +machine=`uname -m` +case "x$machine" in + xi?86 | xx86_64) + list= + for i in /boot/vmlinuz-* /vmlinuz-* /boot/kernel-* ; do + if grub_file_is_not_garbage "$i" ; then list="$list $i" ; fi + done ;; + *) + list= + for i in /boot/vmlinuz-* /boot/vmlinux-* /vmlinuz-* /vmlinux-* /boot/kernel-* ; do + if grub_file_is_not_garbage "$i" ; then list="$list $i" ; fi + done ;; +esac + +case "$machine" in + i?86) GENKERNEL_ARCH="x86" ;; + mips|mips64) GENKERNEL_ARCH="mips" ;; + mipsel|mips64el) GENKERNEL_ARCH="mipsel" ;; + arm*) GENKERNEL_ARCH="arm" ;; + *) GENKERNEL_ARCH="$machine" ;; +esac + +prepare_boot_cache= +prepare_root_cache= +boot_device_id= +title_correction_code= + +cat << 'EOF' +function gfxmode { + set gfxpayload="${1}" +EOF +if [ "$vt_handoff" = 1 ]; then + cat << 'EOF' + if [ "${1}" = "keep" ]; then + set vt_handoff=vt.handoff=1 + else + set vt_handoff= + fi +EOF +fi +cat << EOF +} +EOF + +# Use ELILO's generic "efifb" when it's known to be available. +# FIXME: We need an interface to select vesafb in case efifb can't be used. +if [ "x$GRUB_GFXPAYLOAD_LINUX" != x ] || [ "$gfxpayload_dynamic" = 0 ]; then + echo "set linux_gfx_mode=$GRUB_GFXPAYLOAD_LINUX" +else + cat << EOF +if [ "\${recordfail}" != 1 ]; then + if [ -e \${prefix}/gfxblacklist.txt ]; then + if hwmatch \${prefix}/gfxblacklist.txt 3; then + if [ \${match} = 0 ]; then + set linux_gfx_mode=keep + else + set linux_gfx_mode=text + fi + else + set linux_gfx_mode=text + fi + else + set linux_gfx_mode=keep + fi +else + set linux_gfx_mode=text +fi +EOF +fi +cat << EOF +export linux_gfx_mode +EOF + +# Extra indentation to add to menu entries in a submenu. We're not in a submenu +# yet, so it's empty. In a submenu it will be equal to '\t' (one tab). +submenu_indentation="" + +is_top_level=true +while [ "x$list" != "x" ] ; do + linux=`version_find_latest $list` + case $linux in + *.efi.signed) + # We handle these in linux_entry. + list=`echo $list | tr ' ' '\n' | grep -vx $linux | tr '\n' ' '` + continue + ;; + esac + gettext_printf "Found linux image: %s\n" "$linux" >&2 + basename=`basename $linux` + dirname=`dirname $linux` + rel_dirname=`make_system_path_relative_to_its_root $dirname` + version=`echo $basename | sed -e "s,^[^0-9]*-,,g"` + alt_version=`echo $version | sed -e "s,\.old$,,g"` + linux_root_device_thisversion="${LINUX_ROOT_DEVICE}" + + initrd= + for i in "initrd.img-${version}" "initrd-${version}.img" "initrd-${version}.gz" \ + "initrd-${version}" "initramfs-${version}.img" \ + "initrd.img-${alt_version}" "initrd-${alt_version}.img" \ + "initrd-${alt_version}" "initramfs-${alt_version}.img" \ + "initramfs-genkernel-${version}" \ + "initramfs-genkernel-${alt_version}" \ + "initramfs-genkernel-${GENKERNEL_ARCH}-${version}" \ + "initramfs-genkernel-${GENKERNEL_ARCH}-${alt_version}"; do + if test -e "${dirname}/${i}" ; then + initrd="$i" + break + fi + done + + config= + for i in "${dirname}/config-${version}" "${dirname}/config-${alt_version}" "/etc/kernels/kernel-config-${version}" ; do + if test -e "${i}" ; then + config="${i}" + break + fi + done + + initramfs= + if test -n "${config}" ; then + initramfs=`grep CONFIG_INITRAMFS_SOURCE= "${config}" | cut -f2 -d= | tr -d \"` + fi + + if test -n "${initrd}" ; then + gettext_printf "Found initrd image: %s\n" "${dirname}/${initrd}" >&2 + elif test -z "${initramfs}" ; then + # "UUID=" and "ZFS=" magic is parsed by initrd or initramfs. Since there's + # no initrd or builtin initramfs, it can't work here. + linux_root_device_thisversion=${GRUB_DEVICE} + fi + + if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xy ]; then + linux_entry "${OS}" "${version}" simple \ + "${GRUB_CMDLINE_LINUX} ${GRUB_CMDLINE_LINUX_DEFAULT}" + + submenu_indentation="$grub_tab" + + if [ -z "$boot_device_id" ]; then + boot_device_id="$(grub_get_device_id "${GRUB_DEVICE}")" + fi + # TRANSLATORS: %s is replaced with an OS name + echo "submenu '$(gettext_printf "Advanced options for %s" "${OS}" | grub_quote)' \$menuentry_id_option 'gnulinux-advanced-$boot_device_id' {" + is_top_level=false + fi + + linux_entry "${OS}" "${version}" advanced \ + "${GRUB_CMDLINE_LINUX} ${GRUB_CMDLINE_LINUX_DEFAULT}" + for supported_init in ${SUPPORTED_INITS}; do + init_path="${supported_init#*:}" + if [ -x "${init_path}" ] && [ "$(readlink -f /sbin/init)" != "$(readlink -f "${init_path}")" ]; then + linux_entry "${OS}" "${version}" "init-${supported_init%%:*}" \ + "${GRUB_CMDLINE_LINUX} ${GRUB_CMDLINE_LINUX_DEFAULT} init=${init_path}" + fi + done + if [ "x${GRUB_DISABLE_RECOVERY}" != "xtrue" ]; then + linux_entry "${OS}" "${version}" recovery \ + "${GRUB_CMDLINE_LINUX_RECOVERY} ${GRUB_CMDLINE_LINUX}" + fi + + list=`echo $list | tr ' ' '\n' | fgrep -vx "$linux" | tr '\n' ' '` +done + +# If at least one kernel was found, then we need to +# add a closing '}' for the submenu command. +if [ x"$is_top_level" != xtrue ]; then + echo '}' +fi + +echo "$title_correction_code" diff --git a/grub.d/20_linux_xen b/grub.d/20_linux_xen new file mode 100755 index 0000000..e436efa --- /dev/null +++ b/grub.d/20_linux_xen @@ -0,0 +1,299 @@ +#! /bin/sh +set -e + +# grub-mkconfig helper script. +# Copyright (C) 2006,2007,2008,2009,2010 Free Software Foundation, Inc. +# +# GRUB is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# GRUB is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with GRUB. If not, see . + +prefix="/usr" +exec_prefix="/usr" +datarootdir="/usr/share" + +. "$pkgdatadir/grub-mkconfig_lib" + +export TEXTDOMAIN=grub +export TEXTDOMAINDIR="${datarootdir}/locale" + +CLASS="--class gnu-linux --class gnu --class os --class xen" +SUPPORTED_INITS="sysvinit:/lib/sysvinit/init systemd:/lib/systemd/systemd upstart:/sbin/upstart" + +if [ "x${GRUB_DISTRIBUTOR}" = "x" ] ; then + OS=GNU/Linux +else + OS="${GRUB_DISTRIBUTOR} GNU/Linux" + CLASS="--class $(echo ${GRUB_DISTRIBUTOR} | tr 'A-Z' 'a-z' | cut -d' ' -f1|LC_ALL=C sed 's,[^[:alnum:]_],_,g') ${CLASS}" +fi + +# loop-AES arranges things so that /dev/loop/X can be our root device, but +# the initrds that Linux uses don't like that. +case ${GRUB_DEVICE} in + /dev/loop/*|/dev/loop[0-9]) + GRUB_DEVICE=`losetup ${GRUB_DEVICE} | sed -e "s/^[^(]*(\([^)]\+\)).*/\1/"` + # We can't cope with devices loop-mounted from files here. + case ${GRUB_DEVICE} in + /dev/*) ;; + *) exit 0 ;; + esac + ;; +esac + +# btrfs may reside on multiple devices. We cannot pass them as value of root= parameter +# and mounting btrfs requires user space scanning, so force UUID in this case. +if [ "x${GRUB_DEVICE_UUID}" = "x" ] || [ "x${GRUB_DISABLE_LINUX_UUID}" = "xtrue" ] \ + || ! test -e "/dev/disk/by-uuid/${GRUB_DEVICE_UUID}" \ + || ( test -e "${GRUB_DEVICE}" && uses_abstraction "${GRUB_DEVICE}" lvm ); then + LINUX_ROOT_DEVICE=${GRUB_DEVICE} +else + LINUX_ROOT_DEVICE=UUID=${GRUB_DEVICE_UUID} +fi + +# Allow overriding GRUB_CMDLINE_LINUX and GRUB_CMDLINE_LINUX_DEFAULT. +if [ "${GRUB_CMDLINE_LINUX_XEN_REPLACE}" ]; then + GRUB_CMDLINE_LINUX="${GRUB_CMDLINE_LINUX_XEN_REPLACE}" +fi +if [ "${GRUB_CMDLINE_LINUX_XEN_REPLACE_DEFAULT}" ]; then + GRUB_CMDLINE_LINUX_DEFAULT="${GRUB_CMDLINE_LINUX_XEN_REPLACE_DEFAULT}" +fi + +case x"$GRUB_FS" in + xbtrfs) + rootsubvol="`make_system_path_relative_to_its_root /`" + rootsubvol="${rootsubvol#/}" + if [ "x${rootsubvol}" != x ]; then + GRUB_CMDLINE_LINUX="rootflags=subvol=${rootsubvol} ${GRUB_CMDLINE_LINUX}" + fi;; + xzfs) + rpool=`${grub_probe} --device ${GRUB_DEVICE} --target=fs_label 2>/dev/null || true` + bootfs="`make_system_path_relative_to_its_root / | sed -e "s,@$,,"`" + LINUX_ROOT_DEVICE="ZFS=${rpool}${bootfs}" + ;; +esac + +title_correction_code= + +linux_entry () +{ + os="$1" + version="$2" + xen_version="$3" + type="$4" + args="$5" + xen_args="$6" + if [ -z "$boot_device_id" ]; then + boot_device_id="$(grub_get_device_id "${GRUB_DEVICE}")" + fi + if [ x$type != xsimple ] ; then + if [ x$type = xrecovery ] ; then + title="$(gettext_printf "%s, with Xen %s and Linux %s (%s)" "${os}" "${xen_version}" "${version}" "$(gettext "${GRUB_RECOVERY_TITLE}")")" + elif [ "${type#init-}" != "$type" ] ; then + title="$(gettext_printf "%s, with Xen %s and Linux %s (%s)" "${os}" "${xen_version}" "${version}" "${type#init-}")" + else + title="$(gettext_printf "%s, with Xen %s and Linux %s" "${os}" "${xen_version}" "${version}")" + fi + replacement_title="$(echo "Advanced options for ${OS}" | sed 's,>,>>,g')>$(echo "$title" | sed 's,>,>>,g')" + if [ x"Xen ${xen_version}>$title" = x"$GRUB_ACTUAL_DEFAULT" ]; then + quoted="$(echo "$GRUB_ACTUAL_DEFAULT" | grub_quote)" + title_correction_code="${title_correction_code}if [ \"x\$default\" = '$quoted' ]; then default='$(echo "$replacement_title" | grub_quote)'; fi;" + grub_warn "$(gettext_printf "Please don't use old title \`%s' for GRUB_DEFAULT, use \`%s' (for versions before 2.00) or \`%s' (for 2.00 or later)" "$GRUB_ACTUAL_DEFAULT" "$replacement_title" "gnulinux-advanced-$boot_device_id>gnulinux-$version-$type-$boot_device_id")" + fi + echo "menuentry '$(echo "$title" | grub_quote)' ${CLASS} \$menuentry_id_option 'xen-gnulinux-$version-$type-$boot_device_id' {" | sed "s/^/$submenu_indentation/" + else + title="$(gettext_printf "%s, with Xen hypervisor" "${os}")" + echo "menuentry '$(echo "$title" | grub_quote)' ${CLASS} \$menuentry_id_option 'xen-gnulinux-simple-$boot_device_id' {" | sed "s/^/$submenu_indentation/" + fi + if [ x$type != xrecovery ] ; then + save_default_entry | grub_add_tab | sed "s/^/$submenu_indentation/" + fi + + if [ -z "${prepare_boot_cache}" ]; then + prepare_boot_cache="$(prepare_grub_to_access_device ${GRUB_DEVICE_BOOT} | grub_add_tab)" + fi + printf '%s\n' "${prepare_boot_cache}" | sed "s/^/$submenu_indentation/" + xmessage="$(gettext_printf "Loading Xen %s ..." ${xen_version})" + lmessage="$(gettext_printf "Loading Linux %s ..." ${version})" + sed "s/^/$submenu_indentation/" << EOF + echo '$(echo "$xmessage" | grub_quote)' + if [ "\$grub_platform" = "pc" -o "\$grub_platform" = "" ]; then + xen_rm_opts= + else + xen_rm_opts="no-real-mode edd=off" + fi + ${xen_loader} ${rel_xen_dirname}/${xen_basename} placeholder ${xen_args} \${xen_rm_opts} + echo '$(echo "$lmessage" | grub_quote)' + ${module_loader} ${rel_dirname}/${basename} placeholder root=${linux_root_device_thisversion} ro ${args} +EOF + if test -n "${initrd}" ; then + # TRANSLATORS: ramdisk isn't identifier. Should be translated. + message="$(gettext_printf "Loading initial ramdisk ...")" + sed "s/^/$submenu_indentation/" << EOF + echo '$(echo "$message" | grub_quote)' + ${module_loader} --nounzip ${rel_dirname}/${initrd} +EOF + fi + sed "s/^/$submenu_indentation/" << EOF +} +EOF +} + +linux_list= +for i in /boot/vmlinu[xz]-* /vmlinu[xz]-* /boot/kernel-*; do + if grub_file_is_not_garbage "$i"; then + basename=$(basename $i) + version=$(echo $basename | sed -e "s,^[^0-9]*-,,g") + dirname=$(dirname $i) + config= + for j in "${dirname}/config-${version}" "${dirname}/config-${alt_version}" "/etc/kernels/kernel-config-${version}" ; do + if test -e "${j}" ; then + config="${j}" + break + fi + done + if (grep -qx "CONFIG_XEN_DOM0=y" "${config}" 2> /dev/null || grep -qx "CONFIG_XEN_PRIVILEGED_GUEST=y" "${config}" 2> /dev/null); then linux_list="$linux_list $i" ; fi + fi +done +if [ "x${linux_list}" = "x" ] ; then + exit 0 +fi + +file_is_not_sym () { + case "$1" in + */xen-syms-*) + return 1;; + *) + return 0;; + esac +} + +xen_list= +for i in /boot/xen*; do + if grub_file_is_not_garbage "$i" && file_is_not_sym "$i" ; then xen_list="$xen_list $i" ; fi +done +prepare_boot_cache= +boot_device_id= + +title_correction_code= + +machine=`uname -m` + +case "$machine" in + i?86) GENKERNEL_ARCH="x86" ;; + mips|mips64) GENKERNEL_ARCH="mips" ;; + mipsel|mips64el) GENKERNEL_ARCH="mipsel" ;; + arm*) GENKERNEL_ARCH="arm" ;; + *) GENKERNEL_ARCH="$machine" ;; +esac + +# Extra indentation to add to menu entries in a submenu. We're not in a submenu +# yet, so it's empty. In a submenu it will be equal to '\t' (one tab). +submenu_indentation="" + +is_top_level=true + +while [ "x${xen_list}" != "x" ] ; do + list="${linux_list}" + current_xen=`version_find_latest $xen_list` + xen_basename=`basename ${current_xen}` + xen_dirname=`dirname ${current_xen}` + rel_xen_dirname=`make_system_path_relative_to_its_root $xen_dirname` + xen_version=`echo $xen_basename | sed -e "s,.gz$,,g;s,^xen-,,g"` + if [ -z "$boot_device_id" ]; then + boot_device_id="$(grub_get_device_id "${GRUB_DEVICE}")" + fi + if [ "x$is_top_level" != xtrue ]; then + echo " submenu '$(gettext_printf "Xen hypervisor, version %s" "${xen_version}" | grub_quote)' \$menuentry_id_option 'xen-hypervisor-$xen_version-$boot_device_id' {" + fi + if ($grub_file --is-x86-multiboot2 $current_xen); then + xen_loader="multiboot2" + module_loader="module2" + else + xen_loader="multiboot" + module_loader="module" + fi + while [ "x$list" != "x" ] ; do + linux=`version_find_latest $list` + gettext_printf "Found linux image: %s\n" "$linux" >&2 + basename=`basename $linux` + dirname=`dirname $linux` + rel_dirname=`make_system_path_relative_to_its_root $dirname` + version=`echo $basename | sed -e "s,^[^0-9]*-,,g"` + alt_version=`echo $version | sed -e "s,\.old$,,g"` + linux_root_device_thisversion="${LINUX_ROOT_DEVICE}" + + initrd= + for i in "initrd.img-${version}" "initrd-${version}.img" "initrd-${version}.gz" \ + "initrd-${version}" "initramfs-${version}.img" \ + "initrd.img-${alt_version}" "initrd-${alt_version}.img" \ + "initrd-${alt_version}" "initramfs-${alt_version}.img" \ + "initramfs-genkernel-${version}" \ + "initramfs-genkernel-${alt_version}" \ + "initramfs-genkernel-${GENKERNEL_ARCH}-${version}" \ + "initramfs-genkernel-${GENKERNEL_ARCH}-${alt_version}" ; do + if test -e "${dirname}/${i}" ; then + initrd="$i" + break + fi + done + if test -n "${initrd}" ; then + gettext_printf "Found initrd image: %s\n" "${dirname}/${initrd}" >&2 + else + # "UUID=" magic is parsed by initrds. Since there's no initrd, it can't work here. + linux_root_device_thisversion=${GRUB_DEVICE} + fi + + if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xy ]; then + linux_entry "${OS}" "${version}" "${xen_version}" simple \ + "${GRUB_CMDLINE_LINUX} ${GRUB_CMDLINE_LINUX_DEFAULT}" "${GRUB_CMDLINE_XEN} ${GRUB_CMDLINE_XEN_DEFAULT}" + + submenu_indentation="$grub_tab$grub_tab" + + if [ -z "$boot_device_id" ]; then + boot_device_id="$(grub_get_device_id "${GRUB_DEVICE}")" + fi + # TRANSLATORS: %s is replaced with an OS name + echo "submenu '$(gettext_printf "Advanced options for %s (with Xen hypervisor)" "${OS}" | grub_quote)' \$menuentry_id_option 'gnulinux-advanced-$boot_device_id' {" + echo " submenu '$(gettext_printf "Xen hypervisor, version %s" "${xen_version}" | grub_quote)' \$menuentry_id_option 'xen-hypervisor-$xen_version-$boot_device_id' {" + is_top_level=false + fi + + linux_entry "${OS}" "${version}" "${xen_version}" advanced \ + "${GRUB_CMDLINE_LINUX} ${GRUB_CMDLINE_LINUX_DEFAULT}" "${GRUB_CMDLINE_XEN} ${GRUB_CMDLINE_XEN_DEFAULT}" + for supported_init in ${SUPPORTED_INITS}; do + init_path="${supported_init#*:}" + if [ -x "${init_path}" ] && [ "$(readlink -f /sbin/init)" != "$(readlink -f "${init_path}")" ]; then + linux_entry "${OS}" "${version}" "${xen_version}" "init-${supported_init%%:*}" \ + "${GRUB_CMDLINE_LINUX} ${GRUB_CMDLINE_LINUX_DEFAULT} init=${init_path}" "${GRUB_CMDLINE_XEN} ${GRUB_CMDLINE_XEN_DEFAULT}" + + fi + done + if [ "x${GRUB_DISABLE_RECOVERY}" != "xtrue" ]; then + linux_entry "${OS}" "${version}" "${xen_version}" recovery \ + "single ${GRUB_CMDLINE_LINUX}" "${GRUB_CMDLINE_XEN}" + fi + + list=`echo $list | tr ' ' '\n' | fgrep -vx "$linux" | tr '\n' ' '` + done + if [ x"$is_top_level" != xtrue ]; then + echo ' }' + fi + xen_list=`echo $xen_list | tr ' ' '\n' | fgrep -vx "$current_xen" | tr '\n' ' '` +done + +# If at least one kernel was found, then we need to +# add a closing '}' for the submenu command. +if [ x"$is_top_level" != xtrue ]; then + echo '}' +fi + +echo "$title_correction_code" diff --git a/grub.d/30_os-prober b/grub.d/30_os-prober new file mode 100755 index 0000000..258799b --- /dev/null +++ b/grub.d/30_os-prober @@ -0,0 +1,376 @@ +#! /bin/sh +set -e + +# grub-mkconfig helper script. +# Copyright (C) 2006,2007,2008,2009 Free Software Foundation, Inc. +# +# GRUB is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# GRUB is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with GRUB. If not, see . + +prefix="/usr" +exec_prefix="/usr" +datarootdir="/usr/share" +quick_boot="1" + +export TEXTDOMAIN=grub +export TEXTDOMAINDIR="${datarootdir}/locale" + +. "$pkgdatadir/grub-mkconfig_lib" + +found_other_os= + +adjust_timeout () { + if [ "$quick_boot" = 1 ] && [ "x${found_other_os}" != "x" ]; then + cat << EOF +set timeout_style=menu +if [ "\${timeout}" = 0 ]; then + set timeout=10 +fi +EOF + fi +} + +if [ "x${GRUB_DISABLE_OS_PROBER}" = "xtrue" ]; then + exit 0 +fi + +if [ -z "`which os-prober 2> /dev/null`" ] || [ -z "`which linux-boot-prober 2> /dev/null`" ] ; then + # missing os-prober and/or linux-boot-prober + exit 0 +fi + +OSPROBED="`os-prober | tr ' ' '^' | paste -s -d ' '`" +if [ -z "${OSPROBED}" ] ; then + # empty os-prober output, nothing doing + exit 0 +fi + +osx_entry() { + found_other_os=1 + if [ x$2 = x32 ]; then + # TRANSLATORS: it refers to kernel architecture (32-bit) + bitstr="$(gettext "(32-bit)")" + else + # TRANSLATORS: it refers to kernel architecture (64-bit) + bitstr="$(gettext "(64-bit)")" + fi + # TRANSLATORS: it refers on the OS residing on device %s + onstr="$(gettext_printf "(on %s)" "${DEVICE}")" + cat << EOF +menuentry '$(echo "${LONGNAME} $bitstr $onstr" | grub_quote)' --class osx --class darwin --class os \$menuentry_id_option 'osprober-xnu-$2-$(grub_get_device_id "${DEVICE}")' { +EOF + save_default_entry | grub_add_tab + prepare_grub_to_access_device ${DEVICE} | grub_add_tab + cat << EOF + load_video + set do_resume=0 + if [ /var/vm/sleepimage -nt10 / ]; then + if xnu_resume /var/vm/sleepimage; then + set do_resume=1 + fi + fi + if [ \$do_resume = 0 ]; then + xnu_uuid ${OSXUUID} uuid + if [ -f /Extra/DSDT.aml ]; then + acpi -e /Extra/DSDT.aml + fi + if [ /kernelcache -nt /System/Library/Extensions ]; then + $1 /kernelcache boot-uuid=\${uuid} rd=*uuid + elif [ -f /System/Library/Kernels/kernel ]; then + $1 /System/Library/Kernels/kernel boot-uuid=\${uuid} rd=*uuid + xnu_kextdir /System/Library/Extensions + else + $1 /mach_kernel boot-uuid=\${uuid} rd=*uuid + if [ /System/Library/Extensions.mkext -nt /System/Library/Extensions ]; then + xnu_mkext /System/Library/Extensions.mkext + else + xnu_kextdir /System/Library/Extensions + fi + fi + if [ -f /Extra/Extensions.mkext ]; then + xnu_mkext /Extra/Extensions.mkext + fi + if [ -d /Extra/Extensions ]; then + xnu_kextdir /Extra/Extensions + fi + if [ -f /Extra/devprop.bin ]; then + xnu_devprop_load /Extra/devprop.bin + fi + if [ -f /Extra/splash.jpg ]; then + insmod jpeg + xnu_splash /Extra/splash.jpg + fi + if [ -f /Extra/splash.png ]; then + insmod png + xnu_splash /Extra/splash.png + fi + if [ -f /Extra/splash.tga ]; then + insmod tga + xnu_splash /Extra/splash.tga + fi + fi +} +EOF +} + +used_osprober_linux_ids= + +wubi= + +for OS in ${OSPROBED} ; do + DEVICE="`echo ${OS} | cut -d ':' -f 1`" + LONGNAME="`echo ${OS} | cut -d ':' -f 2 | tr '^' ' '`" + LABEL="`echo ${OS} | cut -d ':' -f 3 | tr '^' ' '`" + BOOT="`echo ${OS} | cut -d ':' -f 4`" + if UUID="`${grub_probe} --target=fs_uuid --device ${DEVICE%@*}`"; then + EXPUUID="$UUID" + + if [ x"${DEVICE#*@}" != x ] ; then + EXPUUID="${EXPUUID}@${DEVICE#*@}" + fi + + if [ "x${GRUB_OS_PROBER_SKIP_LIST}" != "x" ] && [ "x`echo ${GRUB_OS_PROBER_SKIP_LIST} | grep -i -e '\b'${EXPUUID}'\b'`" != "x" ] ; then + echo "Skipped ${LONGNAME} on ${DEVICE} by user request." >&2 + continue + fi + fi + + BTRFS="`echo ${OS} | cut -d ':' -f 5`" + if [ "x$BTRFS" = "xbtrfs" ]; then + BTRFSuuid="`echo ${OS} | cut -d ':' -f 6`" + BTRFSsubvol="`echo ${OS} | cut -d ':' -f 7`" + fi + + if [ -z "${LONGNAME}" ] ; then + LONGNAME="${LABEL}" + fi + + # os-prober returns text string followed by optional counter + CLASS="--class $(echo "${LABEL}" | LC_ALL=C sed 's,[[:digit:]]*$,,' | cut -d' ' -f1 | tr 'A-Z' 'a-z' | LC_ALL=C sed 's,[^[:alnum:]_],_,g')" + + gettext_printf "Found %s on %s\n" "${LONGNAME}" "${DEVICE}" >&2 + + case ${BOOT} in + chain) + + case ${LONGNAME} in + Windows*) + if [ -z "$wubi" ]; then + if [ -x /usr/share/lupin-support/grub-mkimage ] && \ + /usr/share/lupin-support/grub-mkimage --test; then + wubi=yes + else + wubi=no + fi + fi + if [ "$wubi" = yes ]; then + echo "Skipping ${LONGNAME} on Wubi system" >&2 + continue + fi + ;; + esac + + found_other_os=1 + onstr="$(gettext_printf "(on %s)" "${DEVICE}")" + cat << EOF +menuentry '$(echo "${LONGNAME} $onstr" | grub_quote)' $CLASS --class os \$menuentry_id_option 'osprober-chain-$(grub_get_device_id "${DEVICE}")' { +EOF + save_default_entry | grub_add_tab + prepare_grub_to_access_device ${DEVICE} | grub_add_tab + + if [ x"`${grub_probe} --device ${DEVICE} --target=partmap`" = xmsdos ]; then + cat << EOF + parttool \${root} hidden- +EOF + fi + + case ${LONGNAME} in + Windows\ Vista*|Windows\ 7*|Windows\ Server\ 2008*) + ;; + *) + cat << EOF + drivemap -s (hd0) \${root} +EOF + ;; + esac + + cat < /dev/null; do + counter=$((counter+1)); + done + if [ -z "$boot_device_id" ]; then + boot_device_id="$(grub_get_device_id "${DEVICE}")" + fi + used_osprober_linux_ids="$used_osprober_linux_ids 'osprober-gnulinux-$LKERNEL-${recovery_params}-$counter-$boot_device_id'" + + if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xy ]; then + cat << EOF +menuentry '$(echo "$OS $onstr" | grub_quote)' $CLASS --class gnu-linux --class gnu --class os \$menuentry_id_option 'osprober-gnulinux-simple-$boot_device_id' { +EOF + save_default_entry | grub_add_tab + printf '%s\n' "${prepare_boot_cache}" + cat << EOF + linux ${LKERNEL} ${LPARAMS} +EOF + if [ -n "${LINITRD}" ] ; then + cat << EOF + initrd ${LINITRD} +EOF + fi + cat << EOF +} +EOF + echo "submenu '$(gettext_printf "Advanced options for %s" "${OS} $onstr" | grub_quote)' \$menuentry_id_option 'osprober-gnulinux-advanced-$boot_device_id' {" + is_top_level=false + fi + title="${LLABEL} $onstr" + cat << EOF + menuentry '$(echo "$title" | grub_quote)' --class gnu-linux --class gnu --class os \$menuentry_id_option 'osprober-gnulinux-$LKERNEL-${recovery_params}-$boot_device_id' { +EOF + save_default_entry | sed -e "s/^/$grub_tab$grub_tab/" + printf '%s\n' "${prepare_boot_cache}" | grub_add_tab + cat << EOF + linux ${LKERNEL} ${LPARAMS} +EOF + if [ -n "${LINITRD}" ] ; then + cat << EOF + initrd ${LINITRD} +EOF + fi + cat << EOF + } +EOF + if [ x"$title" = x"$GRUB_ACTUAL_DEFAULT" ] || [ x"Previous Linux versions>$title" = x"$GRUB_ACTUAL_DEFAULT" ]; then + replacement_title="$(echo "Advanced options for ${OS} $onstr" | sed 's,>,>>,g')>$(echo "$title" | sed 's,>,>>,g')" + quoted="$(echo "$GRUB_ACTUAL_DEFAULT" | grub_quote)" + title_correction_code="${title_correction_code}if [ \"x\$default\" = '$quoted' ]; then default='$(echo "$replacement_title" | grub_quote)'; fi;" + grub_warn "$(gettext_printf "Please don't use old title \`%s' for GRUB_DEFAULT, use \`%s' (for versions before 2.00) or \`%s' (for 2.00 or later)" "$GRUB_ACTUAL_DEFAULT" "$replacement_title" "gnulinux-advanced-$boot_device_id>gnulinux-$version-$type-$boot_device_id")" + fi + done + if [ x"$is_top_level" != xtrue ]; then + echo '}' + fi + echo "$title_correction_code" + ;; + macosx) + if [ "${UUID}" ]; then + OSXUUID="${UUID}" + osx_entry xnu_kernel 32 + osx_entry xnu_kernel64 64 + fi + ;; + hurd) + found_other_os=1 + onstr="$(gettext_printf "(on %s)" "${DEVICE}")" + cat << EOF +menuentry '$(echo "${LONGNAME} $onstr" | grub_quote)' --class hurd --class gnu --class os \$menuentry_id_option 'osprober-gnuhurd-/boot/gnumach.gz-false-$(grub_get_device_id "${DEVICE}")' { +EOF + save_default_entry | grub_add_tab + prepare_grub_to_access_device ${DEVICE} | grub_add_tab + grub_device="`${grub_probe} --device ${DEVICE} --target=drive`" + mach_device="`echo "${grub_device}" | sed -e 's/(\(hd.*\),msdos\(.*\))/\1s\2/'`" + grub_fs="`${grub_probe} --device ${DEVICE} --target=fs`" + case "${grub_fs}" in + *fs) hurd_fs="${grub_fs}" ;; + *) hurd_fs="${grub_fs}fs" ;; + esac + cat << EOF + multiboot /boot/gnumach.gz root=device:${mach_device} + module /hurd/${hurd_fs}.static ${hurd_fs} --readonly \\ + --multiboot-command-line='\${kernel-command-line}' \\ + --host-priv-port='\${host-port}' \\ + --device-master-port='\${device-port}' \\ + --exec-server-task='\${exec-task}' -T typed '\${root}' \\ + '\$(task-create)' '\$(task-resume)' + module /lib/ld.so.1 exec /hurd/exec '\$(exec-task=task-create)' +} +EOF + ;; + minix) + cat << EOF +menuentry "${LONGNAME} (on ${DEVICE}, Multiboot)" { +EOF + save_default_entry | sed -e "s/^/\t/" + prepare_grub_to_access_device ${DEVICE} | sed -e "s/^/\t/" + cat << EOF + multiboot /boot/image_latest +} +EOF + ;; + *) + # TRANSLATORS: %s is replaced by OS name. + gettext_printf "%s is not yet supported by grub-mkconfig.\n" " ${LONGNAME}" >&2 + ;; + esac +done + +adjust_timeout diff --git a/grub.d/30_uefi-firmware b/grub.d/30_uefi-firmware new file mode 100755 index 0000000..0a4ee10 --- /dev/null +++ b/grub.d/30_uefi-firmware @@ -0,0 +1,46 @@ +#! /bin/sh +set -e + +# grub-mkconfig helper script. +# Copyright (C) 2012 Free Software Foundation, Inc. +# +# GRUB is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# GRUB is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with GRUB. If not, see . + +prefix="/usr" +exec_prefix="/usr" +datarootdir="/usr/share" + +export TEXTDOMAIN=grub +export TEXTDOMAINDIR="${datarootdir}/locale" + +. "${datarootdir}/grub/grub-mkconfig_lib" + +efi_vars_dir=/sys/firmware/efi/vars +EFI_GLOBAL_VARIABLE=8be4df61-93ca-11d2-aa0d-00e098032b8c +OsIndications="$efi_vars_dir/OsIndicationsSupported-$EFI_GLOBAL_VARIABLE/data" + +if [ -e "$OsIndications" ] && \ + [ "$(( $(printf 0x%x \'"$(cat $OsIndications | cut -b1)") & 1 ))" = 1 ]; then + LABEL="System setup" + + gettext_printf "Adding boot menu entry for EFI firmware configuration\n" >&2 + + onstr="$(gettext_printf "(on %s)" "${DEVICE}")" + + cat << EOF +menuentry '$LABEL' \$menuentry_id_option 'uefi-firmware' { + fwsetup +} +EOF +fi diff --git a/grub.d/40_custom b/grub.d/40_custom new file mode 100755 index 0000000..48068de --- /dev/null +++ b/grub.d/40_custom @@ -0,0 +1,5 @@ +#!/bin/sh +exec tail -n +3 $0 +# This file provides an easy way to add custom menu entries. Simply type the +# menu entries you want to add after this comment. Be careful not to change +# the 'exec tail' line above. diff --git a/grub.d/41_custom b/grub.d/41_custom new file mode 100755 index 0000000..fcc21a9 --- /dev/null +++ b/grub.d/41_custom @@ -0,0 +1,9 @@ +#!/bin/sh +cat </dev/null + log_end_msg $? +} + +set +e + +case "$1" in + start) + load_modules || true + log_daemon_msg "Starting ACPI services" "acpid" + start-stop-daemon --start --quiet --oknodo --exec "$ACPID" -- $OPTIONS + log_end_msg $? + ;; + stop) + log_daemon_msg "Stopping ACPI services" "acpid" + start-stop-daemon --stop --quiet --oknodo --retry 2 --exec "$ACPID" + log_end_msg $? + ;; + restart) + $0 stop + sleep 1 + $0 start + ;; + reload|force-reload) + log_daemon_msg "Reloading ACPI services" "acpid" + start-stop-daemon --stop --signal 1 --exec "$ACPID" + log_end_msg $? + ;; + status) + status_of_proc "$ACPID" acpid + ;; + *) + log_success_msg "Usage: /etc/init.d/acpid {start|stop|restart|reload|force-reload|status}" + exit 1 +esac + diff --git a/init.d/apache-htcacheclean b/init.d/apache-htcacheclean new file mode 100755 index 0000000..c7f7f94 --- /dev/null +++ b/init.d/apache-htcacheclean @@ -0,0 +1,71 @@ +#!/bin/sh +# kFreeBSD do not accept scripts as interpreters, using #!/bin/sh and sourcing. +if [ true != "$INIT_D_SCRIPT_SOURCED" ] ; then + set "$0" "$@"; INIT_D_SCRIPT_SOURCED=true . /lib/init/init-d-script +fi +### BEGIN INIT INFO +# Provides: apache-htcacheclean +# Required-Start: $remote_fs $syslog +# Required-Stop: $remote_fs $syslog +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: Cache cleaner process for Apache2 web server +# Description: Start the htcacheclean helper +# This script will start htcacheclean which will periodically scan the +# cache directory of Apache2's mod_cache_disk and remove outdated files. +### END INIT INFO + +DESC="Apache htcacheclean" +DAEMON=/usr/bin/htcacheclean + +NAME="${0##*/}" +NAME="${NAME##[KS][0-9][0-9]}" +DIR_SUFFIX="${NAME##apache-htcacheclean}" +APACHE_CONFDIR="${APACHE_CONFDIR:=/etc/apache2$DIR_SUFFIX}" +RUN_USER=$(. $APACHE_CONFDIR/envvars > /dev/null && echo "$APACHE_RUN_USER") + +# Default values. Edit /etc/default/apache-htcacheclean$DIR_SUFFIX to change these +HTCACHECLEAN_SIZE="${HTCACHECLEAN_SIZE:=300M}" +HTCACHECLEAN_DAEMON_INTERVAL="${HTCACHECLEAN_DAEMON_INTERVAL:=120}" +HTCACHECLEAN_PATH="${HTCACHECLEAN_PATH:=/var/cache/apache2$DIR_SUFFIX/mod_cache_disk}" +HTCACHECLEAN_OPTIONS="${HTCACHECLEAN_OPTIONS:=-n}" + +# Read configuration variable file if it is present +if [ -f /etc/default/apache-htcacheclean$DIR_SUFFIX ] ; then + . /etc/default/apache-htcacheclean$DIR_SUFFIX +elif [ -f /etc/default/apache-htcacheclean ] ; then + . /etc/default/apache-htcacheclean +fi + +PIDDIR="/var/run/apache2/$RUN_USER" +PIDFILE="$PIDDIR/$NAME.pid" +DAEMON_ARGS="$HTCACHECLEAN_OPTIONS \ + -d$HTCACHECLEAN_DAEMON_INTERVAL \ + -P$PIDFILE -i \ + -p$HTCACHECLEAN_PATH \ + -l$HTCACHECLEAN_SIZE" + +do_start_prepare () { + if [ ! -d "$PIDDIR" ] ; then + mkdir -p "$PIDDIR" + chown "$RUN_USER:" "$PIDDIR" + fi + if [ ! -d "$HTCACHECLEAN_PATH" ] ; then + echo "Directory $HTCACHECLEAN_PATH does not exist!" >&2 + exit 2 + fi +} + +do_start_cmd_override () { + start-stop-daemon --start --quiet --pidfile ${PIDFILE} \ + -u $RUN_USER --startas $DAEMON --name htcacheclean --test > /dev/null \ + || return 1 + start-stop-daemon --start --quiet --pidfile ${PIDFILE} \ + -c $RUN_USER --startas $DAEMON --name htcacheclean -- $DAEMON_ARGS \ + || return 2 +} + +do_stop_cmd_override () { + start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 \ + -u $RUN_USER --pidfile ${PIDFILE} --name htcacheclean +} diff --git a/init.d/apache2 b/init.d/apache2 new file mode 100755 index 0000000..1f51d9e --- /dev/null +++ b/init.d/apache2 @@ -0,0 +1,355 @@ +#!/bin/sh +### BEGIN INIT INFO +# Provides: apache2 +# Required-Start: $local_fs $remote_fs $network $syslog $named +# Required-Stop: $local_fs $remote_fs $network $syslog $named +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# X-Interactive: true +# Short-Description: Apache2 web server +# Description: Start the web server +# This script will start the apache2 web server. +### END INIT INFO + +DESC="Apache httpd web server" +NAME=apache2 +DAEMON=/usr/sbin/$NAME + +SCRIPTNAME="${0##*/}" +SCRIPTNAME="${SCRIPTNAME##[KS][0-9][0-9]}" +if [ -n "$APACHE_CONFDIR" ] ; then + if [ "${APACHE_CONFDIR##/etc/apache2-}" != "${APACHE_CONFDIR}" ] ; then + DIR_SUFFIX="${APACHE_CONFDIR##/etc/apache2-}" + else + DIR_SUFFIX= + fi +elif [ "${SCRIPTNAME##apache2-}" != "$SCRIPTNAME" ] ; then + DIR_SUFFIX="-${SCRIPTNAME##apache2-}" + APACHE_CONFDIR=/etc/apache2$DIR_SUFFIX +else + DIR_SUFFIX= + APACHE_CONFDIR=/etc/apache2 +fi +if [ -z "$APACHE_ENVVARS" ] ; then + APACHE_ENVVARS=$APACHE_CONFDIR/envvars +fi +export APACHE_CONFDIR APACHE_ENVVARS + +ENV="env -i LANG=C PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" +if [ "$APACHE_CONFDIR" != /etc/apache2 ] ; then + ENV="$ENV APACHE_CONFDIR=$APACHE_CONFDIR" +fi +if [ "$APACHE_ENVVARS" != "$APACHE_CONFDIR/envvars" ] ; then + ENV="$ENV APACHE_ENVVARS=$APACHE_ENVVARS" +fi + +PIDFILE=$(. $APACHE_ENVVARS && echo $APACHE_PID_FILE) + +VERBOSE=no +if [ -f /etc/default/rcS ]; then + . /etc/default/rcS +fi +. /lib/lsb/init-functions + + +# Now, set defaults: +APACHE2CTL="$ENV apache2ctl" +PIDFILE=$(. $APACHE_ENVVARS && echo $APACHE_PID_FILE) +APACHE2_INIT_MESSAGE="" + +CONFTEST_OUTFILE= +cleanup() { + if [ -n "$CONFTEST_OUTFILE" ] ; then + rm -f "$CONFTEST_OUTFILE" + fi +} +trap cleanup 0 # "0" means "EXIT", but "EXIT" is not portable + + +apache_conftest() { + [ -z "$CONFTEST_OUTFILE" ] || rm -f "$CONFTEST_OUTFILE" + CONFTEST_OUTFILE=$(mktemp) + if ! $APACHE2CTL configtest > "$CONFTEST_OUTFILE" 2>&1 ; then + return 1 + else + rm -f "$CONFTEST_OUTFILE" + CONFTEST_OUTFILE= + return 0 + fi +} + +clear_error_msg() { + [ -z "$CONFTEST_OUTFILE" ] || rm -f "$CONFTEST_OUTFILE" + CONFTEST_OUTFILE= + APACHE2_INIT_MESSAGE= +} + +print_error_msg() { + [ -z "$APACHE2_INIT_MESSAGE" ] || log_warning_msg "$APACHE2_INIT_MESSAGE" + if [ -n "$CONFTEST_OUTFILE" ] ; then + echo "Output of config test was:" >&2 + cat "$CONFTEST_OUTFILE" >&2 + rm -f "$CONFTEST_OUTFILE" + CONFTEST_OUTFILE= + fi +} + +apache_wait_start() { + local STATUS=$1 + local i=0 + + if [ $STATUS != 0 ] ; then + return $STATUS + fi + while : ; do + PIDTMP=$(pidofproc -p $PIDFILE $DAEMON) + if [ -n "${PIDTMP:-}" ] && kill -0 "${PIDTMP:-}" 2> /dev/null; then + return $STATUS + fi + + if [ $i = "20" ] ; then + APACHE2_INIT_MESSAGE="The apache2$DIR_SUFFIX instance did not start within 20 seconds. Please read the log files to discover problems" + return 2 + fi + + [ "$VERBOSE" != no ] && log_progress_msg "." + sleep 1 + i=$(($i+1)) + done +} + +apache_wait_stop() { + local STATUS=$1 + local METH=$2 + + if [ $STATUS != 0 ] ; then + return $STATUS + fi + + PIDTMP=$(pidofproc -p $PIDFILE $DAEMON) + if [ -n "${PIDTMP:-}" ] && kill -0 "${PIDTMP:-}" 2> /dev/null; then + if [ "$METH" = "kill" ]; then + killproc -p $PIDFILE $DAEMON + else + $APACHE2CTL $METH > /dev/null 2>&1 + fi + + local i=0 + while kill -0 "${PIDTMP:-}" 2> /dev/null; do + if [ $i = '60' ]; then + STATUS=2 + break + fi + [ "$VERBOSE" != no ] && log_progress_msg "." + sleep 1 + i=$(($i+1)) + done + return $STATUS + else + return $STATUS + fi +} + + +# +# Function that starts the daemon/service +# +do_start() +{ + # Return + # 0 if daemon has been started + # 1 if daemon was already running + # 2 if daemon could not be started + + if pidofproc -p $PIDFILE "$DAEMON" > /dev/null 2>&1 ; then + return 1 + fi + + if apache_conftest ; then + $APACHE2CTL start + apache_wait_start $? + return $? + else + APACHE2_INIT_MESSAGE="The apache2$DIR_SUFFIX configtest failed." + return 2 + fi +} + +# +# Function that stops the daemon/service +# +do_stop() +{ + # Return + # 0 if daemon has been stopped + # 1 if daemon was already stopped + # 2 if daemon could not be stopped + # other if a failure occurred + + # either "stop" or "graceful-stop" + local STOP=$1 + # can't use pidofproc from LSB here + local AP_RET=0 + + if pidof $DAEMON > /dev/null 2>&1 ; then + if [ -e $PIDFILE ] && pidof $DAEMON | tr ' ' '\n' | grep -w $(cat $PIDFILE) > /dev/null 2>&1 ; then + AP_RET=2 + else + AP_RET=1 + fi + else + AP_RET=0 + fi + + # AP_RET is: + # 0 if Apache (whichever) is not running + # 1 if Apache (whichever) is running + # 2 if Apache from the PIDFILE is running + + if [ $AP_RET = 0 ] ; then + return 1 + fi + + if [ $AP_RET = 2 ] && apache_conftest ; then + apache_wait_stop $? $STOP + return $? + else + if [ $AP_RET = 2 ]; then + clear_error_msg + APACHE2_INIT_MESSAGE="The apache2$DIR_SUFFIX configtest failed, so we are trying to kill it manually. This is almost certainly suboptimal, so please make sure your system is working as you'd expect now!" + apache_wait_stop $? "kill" + return $? + elif [ $AP_RET = 1 ] ; then + APACHE2_INIT_MESSAGE="There are processes named 'apache2' running which do not match your pid file which are left untouched in the name of safety, Please review the situation by hand". + return 2 + fi + fi + +} + + +# +# Function that sends a SIGHUP to the daemon/service +# +do_reload() { + if apache_conftest; then + if ! pidofproc -p $PIDFILE "$DAEMON" > /dev/null 2>&1 ; then + APACHE2_INIT_MESSAGE="Apache2 is not running" + return 2 + fi + $APACHE2CTL graceful > /dev/null 2>&1 + return $? + else + APACHE2_INIT_MESSAGE="The apache2$DIR_SUFFIX configtest failed. Not doing anything." + return 2 + fi +} + + +# Sanity checks. They need to occur after function declarations +[ -x $DAEMON ] || exit 0 + +if [ ! -x $DAEMON ] ; then + echo "No apache-bin package installed" + exit 0 +fi + +if [ -z "$PIDFILE" ] ; then + echo ERROR: APACHE_PID_FILE needs to be defined in $APACHE_ENVVARS >&2 + exit 2 +fi + + +case "$1" in + start) + log_daemon_msg "Starting $DESC" "$NAME" + do_start + RET_STATUS=$? + case "$RET_STATUS" in + 0|1) + log_success_msg + [ "$VERBOSE" != no ] && [ $RET_STATUS = 1 ] && log_warning_msg "Server was already running" + ;; + 2) + log_failure_msg + print_error_msg + exit 1 + ;; + esac + ;; + stop|graceful-stop) + log_daemon_msg "Stopping $DESC" "$NAME" + do_stop "$1" + RET_STATUS=$? + case "$RET_STATUS" in + 0|1) + log_success_msg + [ "$VERBOSE" != no ] && [ $RET_STATUS = 1 ] && log_warning_msg "Server was not running" + ;; + 2) + log_failure_msg + print_error_msg + exit 1 + ;; + esac + print_error_msg + + ;; + status) + status_of_proc -p $PIDFILE "apache2" "$NAME" + exit $? + ;; + reload|force-reload|graceful) + log_daemon_msg "Reloading $DESC" "$NAME" + do_reload + RET_STATUS=$? + case "$RET_STATUS" in + 0|1) + log_success_msg + [ "$VERBOSE" != no ] && [ $RET_STATUS = 1 ] && log_warning_msg "Server was already running" + ;; + 2) + log_failure_msg + print_error_msg + exit 1 + ;; + esac + print_error_msg + ;; + restart) + log_daemon_msg "Restarting $DESC" "$NAME" + do_stop stop + case "$?" in + 0|1) + do_start + case "$?" in + 0) + log_end_msg 0 + ;; + 1|*) + log_end_msg 1 # Old process is still or failed to running + print_error_msg + exit 1 + ;; + esac + ;; + *) + # Failed to stop + log_end_msg 1 + print_error_msg + exit 1 + ;; + esac + ;; + start-htcacheclean|stop-htcacheclean) + echo "Use 'service apache-htcacheclean' instead" + ;; + *) + echo "Usage: $SCRIPTNAME {start|stop|graceful-stop|restart|reload|force-reload}" >&2 + exit 3 + ;; +esac + +exit 0 + +# vim: syntax=sh ts=4 sw=4 sts=4 sr noet diff --git a/init.d/apparmor b/init.d/apparmor new file mode 100755 index 0000000..208abca --- /dev/null +++ b/init.d/apparmor @@ -0,0 +1,161 @@ +#!/bin/sh +# ---------------------------------------------------------------------- +# Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007 +# NOVELL (All rights reserved) +# Copyright (c) 2008, 2009 Canonical, Ltd. +# +# This program is free software; you can redistribute it and/or +# modify it under the terms of version 2 of the GNU General Public +# License published by the Free Software Foundation. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program; if not, contact Novell, Inc. +# ---------------------------------------------------------------------- +# Authors: +# Steve Beattie +# Kees Cook +# +# /etc/init.d/apparmor +# +### BEGIN INIT INFO +# Provides: apparmor +# Required-Start: $local_fs +# Required-Stop: umountfs +# Default-Start: S +# Default-Stop: +# Short-Description: AppArmor initialization +# Description: AppArmor init script. This script loads all AppArmor profiles. +### END INIT INFO + +. /lib/apparmor/functions +. /lib/lsb/init-functions + +usage() { + echo "Usage: $0 {start|stop|restart|reload|force-reload|status|recache}" +} + +test -x ${PARSER} || exit 0 # by debian policy +# LSM is built-in, so it is either there or not enabled for this boot +test -d /sys/module/apparmor || exit 0 + +securityfs() { + # Need securityfs for any mode + if [ ! -d "${AA_SFS}" ]; then + if cut -d" " -f2,3 /proc/mounts | grep -q "^${SECURITYFS} securityfs"'$' ; then + log_action_msg "AppArmor not available as kernel LSM." + log_end_msg 1 + exit 1 + else + log_action_begin_msg "Mounting securityfs on ${SECURITYFS}" + if ! mount -t securityfs none "${SECURITYFS}"; then + log_action_end_msg 1 + log_end_msg 1 + exit 1 + fi + fi + fi + if [ ! -w "$AA_SFS"/.load ]; then + log_action_msg "Insufficient privileges to change profiles." + log_end_msg 1 + exit 1 + fi +} + +# Allow "recache" even when running on the liveCD +if [ "$1" = "recache" ]; then + log_daemon_msg "Recaching AppArmor profiles" + recache_profiles + rc=$? + log_end_msg "$rc" + exit $rc +fi + +# do not perform start/stop/reload actions when running from liveCD +test -d /rofs/etc/apparmor.d && exit 0 + +rc=255 +case "$1" in + start) + if [ -x /usr/bin/systemd-detect-virt ] && \ + systemd-detect-virt --quiet --container && \ + ! is_container_with_internal_policy; then + log_daemon_msg "Not starting AppArmor in container" + log_end_msg 0 + exit 0 + fi + log_daemon_msg "Starting AppArmor profiles" + securityfs + load_configured_profiles + rc=$? + log_end_msg "$rc" + ;; + stop) + log_daemon_msg "Clearing AppArmor profiles cache" + clear_cache + rc=$? + log_end_msg "$rc" + cat >&2 </dev/null 2>&1 || true + + # dirs under /run can go away on reboots. + mkdir -p /run/named + chmod 775 /run/named + chown root:bind /run/named >/dev/null 2>&1 || true + + if [ ! -x /usr/sbin/named ]; then + log_action_msg "named binary missing - not starting" + log_end_msg 1 + fi + + if ! check_network; then + log_action_msg "no networks configured" + log_end_msg 1 + fi + + if start-stop-daemon --start --oknodo --quiet --exec /usr/sbin/named \ + --pidfile ${PIDFILE} -- $OPTIONS; then + if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then + echo "nameserver 127.0.0.1" | /sbin/resolvconf -a lo.named + fi + log_end_msg 0 + else + log_end_msg 1 + fi + ;; + + stop) + log_daemon_msg "Stopping domain name service..." "bind9" + if ! check_network; then + log_action_msg "no networks configured" + log_end_msg 1 + fi + + if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then + /sbin/resolvconf -d lo.named + fi + pid=$(/usr/sbin/rndc stop -p | awk '/^pid:/ {print $2}') || true + if [ -z "$pid" ]; then # no pid found, so either not running, or error + pid=$(pgrep -f ^/usr/sbin/named) || true + start-stop-daemon --stop --oknodo --quiet --exec /usr/sbin/named \ + --pidfile ${PIDFILE} -- $OPTIONS + fi + if [ -n "$pid" ]; then + sig=0 + n=1 + while kill -$sig $pid 2>/dev/null; do + if [ $n -eq 1 ]; then + echo "waiting for pid $pid to die" + fi + if [ $n -eq 11 ]; then + echo "giving up on pid $pid with kill -0; trying -9" + sig=9 + fi + if [ $n -gt 20 ]; then + echo "giving up on pid $pid" + break + fi + n=$(($n+1)) + sleep 1 + done + fi + log_end_msg 0 + ;; + + reload|force-reload) + log_daemon_msg "Reloading domain name service..." "bind9" + if ! check_network; then + log_action_msg "no networks configured" + log_end_msg 1 + fi + + /usr/sbin/rndc reload >/dev/null && log_end_msg 0 || log_end_msg 1 + ;; + + restart) + if ! check_network; then + log_action_msg "no networks configured" + exit 1 + fi + + $0 stop + $0 start + ;; + + status) + ret=0 + status_of_proc -p ${PIDFILE} /usr/sbin/named bind9 2>/dev/null || ret=$? + exit $ret + ;; + + *) + log_action_msg "Usage: /etc/init.d/bind9 {start|stop|reload|restart|force-reload|status}" + exit 1 + ;; +esac + +exit 0 diff --git a/init.d/console-setup.sh b/init.d/console-setup.sh new file mode 100755 index 0000000..292d831 --- /dev/null +++ b/init.d/console-setup.sh @@ -0,0 +1,46 @@ +#!/bin/sh +### BEGIN INIT INFO +# Provides: console-setup.sh +# Required-Start: $remote_fs +# Required-Stop: +# Should-Start: console-screen kbd +# Default-Start: 2 3 4 5 +# Default-Stop: +# X-Interactive: true +# Short-Description: Set console font and keymap +### END INIT INFO + +if [ -f /bin/setupcon ]; then + case "$1" in + stop|status) + # console-setup isn't a daemon + ;; + start|force-reload|restart|reload) + if [ -f /lib/lsb/init-functions ]; then + . /lib/lsb/init-functions + else + log_action_begin_msg () { + echo -n "$@... " + } + + log_action_end_msg () { + if [ "$1" -eq 0 ]; then + echo done. + else + echo failed. + fi + } + fi + log_action_begin_msg "Setting up console font and keymap" + if /lib/console-setup/console-setup.sh; then + log_action_end_msg 0 + else + log_action_end_msg $? + fi + ;; + *) + echo 'Usage: /etc/init.d/console-setup {start|reload|restart|force-reload|stop|status}' + exit 3 + ;; + esac +fi diff --git a/init.d/cron b/init.d/cron new file mode 100755 index 0000000..d09a505 --- /dev/null +++ b/init.d/cron @@ -0,0 +1,92 @@ +#!/bin/sh +# Start/stop the cron daemon. +# +### BEGIN INIT INFO +# Provides: cron +# Required-Start: $remote_fs $syslog $time +# Required-Stop: $remote_fs $syslog $time +# Should-Start: $network $named slapd autofs ypbind nscd nslcd winbind +# Should-Stop: $network $named slapd autofs ypbind nscd nslcd winbind +# Default-Start: 2 3 4 5 +# Default-Stop: +# Short-Description: Regular background program processing daemon +# Description: cron is a standard UNIX program that runs user-specified +# programs at periodic scheduled times. vixie cron adds a +# number of features to the basic UNIX cron, including better +# security and more powerful configuration options. +### END INIT INFO + +PATH=/bin:/usr/bin:/sbin:/usr/sbin +DESC="cron daemon" +NAME=cron +DAEMON=/usr/sbin/cron +PIDFILE=/var/run/crond.pid +SCRIPTNAME=/etc/init.d/"$NAME" + +test -f $DAEMON || exit 0 + +. /lib/lsb/init-functions + +[ -r /etc/default/cron ] && . /etc/default/cron + +# Read the system's locale and set cron's locale. This is only used for +# setting the charset of mails generated by cron. To provide locale +# information to tasks running under cron, see /etc/pam.d/cron. +# +# We read /etc/environment, but warn about locale information in +# there because it should be in /etc/default/locale. +parse_environment () +{ + for ENV_FILE in /etc/environment /etc/default/locale; do + [ -r "$ENV_FILE" ] || continue + [ -s "$ENV_FILE" ] || continue + + for var in LANG LANGUAGE LC_ALL LC_CTYPE; do + value=`egrep "^${var}=" "$ENV_FILE" | tail -n1 | cut -d= -f2` + [ -n "$value" ] && eval export $var=$value + + if [ -n "$value" ] && [ "$ENV_FILE" = /etc/environment ]; then + log_warning_msg "/etc/environment has been deprecated for locale information; use /etc/default/locale for $var=$value instead" + fi + done + done + +# Get the timezone set. + if [ -z "$TZ" -a -e /etc/timezone ]; then + TZ=`cat /etc/timezone` + fi +} + +# Parse the system's environment +if [ "$READ_ENV" = "yes" ] ; then + parse_environment +fi + + +case "$1" in +start) log_daemon_msg "Starting periodic command scheduler" "cron" + start_daemon -p $PIDFILE $DAEMON $EXTRA_OPTS + log_end_msg $? + ;; +stop) log_daemon_msg "Stopping periodic command scheduler" "cron" + killproc -p $PIDFILE $DAEMON + RETVAL=$? + [ $RETVAL -eq 0 ] && [ -e "$PIDFILE" ] && rm -f $PIDFILE + log_end_msg $RETVAL + ;; +restart) log_daemon_msg "Restarting periodic command scheduler" "cron" + $0 stop + $0 start + ;; +reload|force-reload) log_daemon_msg "Reloading configuration files for periodic command scheduler" "cron" + # cron reloads automatically + log_end_msg 0 + ;; +status) + status_of_proc -p $PIDFILE $DAEMON $NAME && exit 0 || exit $? + ;; +*) log_action_msg "Usage: /etc/init.d/cron {start|stop|status|restart|reload|force-reload}" + exit 2 + ;; +esac +exit 0 diff --git a/init.d/dbus b/init.d/dbus new file mode 100755 index 0000000..4f41293 --- /dev/null +++ b/init.d/dbus @@ -0,0 +1,122 @@ +#!/bin/sh +### BEGIN INIT INFO +# Provides: dbus +# Required-Start: $remote_fs $syslog +# Required-Stop: $remote_fs $syslog +# Default-Start: 2 3 4 5 +# Default-Stop: +# Short-Description: D-Bus systemwide message bus +# Description: D-Bus is a simple interprocess messaging system, used +# for sending messages between applications. +### END INIT INFO +# -*- coding: utf-8 -*- +# Debian init.d script for D-BUS +# Copyright © 2003 Colin Walters +# Copyright © 2005 Sjoerd Simons + +set -e + +DAEMON=/usr/bin/dbus-daemon +UUIDGEN=/usr/bin/dbus-uuidgen +UUIDGEN_OPTS=--ensure +NAME=dbus +DAEMONUSER=messagebus +PIDDIR=/var/run/dbus +PIDFILE=$PIDDIR/pid +DESC="system message bus" + +test -x $DAEMON || exit 0 + +. /lib/lsb/init-functions + +# Source defaults file; edit that file to configure this script. +PARAMS="" +if [ -e /etc/default/dbus ]; then + . /etc/default/dbus +fi + +create_machineid() { + # Create machine-id file + if [ -x $UUIDGEN ]; then + $UUIDGEN $UUIDGEN_OPTS + fi +} + +start_it_up() +{ + if [ ! -d $PIDDIR ]; then + mkdir -p $PIDDIR + chown $DAEMONUSER $PIDDIR + chgrp $DAEMONUSER $PIDDIR + fi + + if ! mountpoint -q /proc/ ; then + log_failure_msg "Can't start $DESC - /proc is not mounted" + return + fi + + if [ -e $PIDFILE ]; then + if $0 status > /dev/null ; then + log_success_msg "$DESC already started; not starting." + return + else + log_success_msg "Removing stale PID file $PIDFILE." + rm -f $PIDFILE + fi + fi + + create_machineid + + log_daemon_msg "Starting $DESC" "$NAME" + start-stop-daemon --start --quiet --pidfile $PIDFILE \ + --exec $DAEMON -- --system $PARAMS + log_end_msg $? +} + +shut_it_down() +{ + log_daemon_msg "Stopping $DESC" "$NAME" + start-stop-daemon --stop --retry 5 --quiet --oknodo --pidfile $PIDFILE \ + --user $DAEMONUSER + # We no longer include these arguments so that start-stop-daemon + # can do its job even given that we may have been upgraded. + # We rely on the pidfile being sanely managed + # --exec $DAEMON -- --system $PARAMS + log_end_msg $? + rm -f $PIDFILE +} + +reload_it() +{ + create_machineid + log_action_begin_msg "Reloading $DESC config" + dbus-send --print-reply --system --type=method_call \ + --dest=org.freedesktop.DBus \ + / org.freedesktop.DBus.ReloadConfig > /dev/null + # hopefully this is enough time for dbus to reload it's config file. + log_action_end_msg $? +} + +case "$1" in + start) + start_it_up + ;; + stop) + shut_it_down + ;; + reload|force-reload) + reload_it + ;; + restart) + shut_it_down + start_it_up + ;; + status) + status_of_proc -p $PIDFILE $DAEMON $NAME && exit 0 || exit $? + ;; + *) + echo "Usage: /etc/init.d/$NAME {start|stop|reload|restart|force-reload|status}" >&2 + exit 2 + ;; +esac + diff --git a/init.d/grub-common b/init.d/grub-common new file mode 100755 index 0000000..3e80af4 --- /dev/null +++ b/init.d/grub-common @@ -0,0 +1,39 @@ +#! /bin/sh +### BEGIN INIT INFO +# Provides: grub-common +# Required-Start: $all +# Required-Stop: +# Default-Start: 2 3 4 5 +# Default-Stop: +# Short-Description: Record successful boot for GRUB +# Description: GRUB displays the boot menu at the next boot if it +# believes that the previous boot failed. This script +# informs it that the system booted successfully. +### END INIT INFO + +which grub-editenv >/dev/null 2>&1 || exit 0 + +# Define LSB log_* functions. +# Depend on lsb-base (>= 3.0-6) to ensure that this file is present. +. /lib/lsb/init-functions + +case $1 in + start|restart|force-reload) + log_action_msg "Recording successful boot for GRUB" + [ -s /boot/grub/grubenv ] || rm -f /boot/grub/grubenv + mkdir -p /boot/grub + grub-editenv /boot/grub/grubenv unset recordfail + log_end_msg $? + ;; + stop) + ;; + status) + exit 0 + ;; + *) + echo "Usage: $0 {start|stop|status|restart|force-reload}" >&2 + exit 3 + ;; +esac + +exit 0 diff --git a/init.d/hwclock.sh b/init.d/hwclock.sh new file mode 100755 index 0000000..208ca2d --- /dev/null +++ b/init.d/hwclock.sh @@ -0,0 +1,120 @@ +#!/bin/sh +# hwclock.sh Set and adjust the CMOS clock. +# +# Version: @(#)hwclock.sh 2.00 14-Dec-1998 miquels@cistron.nl +# +# Patches: +# 2000-01-30 Henrique M. Holschuh +# - Minor cosmetic changes in an attempt to help new +# users notice something IS changing their clocks +# during startup/shutdown. +# - Added comments to alert users of hwclock issues +# and discourage tampering without proper doc reading. +# 2012-02-16 Roger Leigh +# - Use the UTC/LOCAL setting in /etc/adjtime rather than +# the UTC setting in /etc/default/rcS. Additionally +# source /etc/default/hwclock to permit configuration. + +### BEGIN INIT INFO +# Provides: hwclock +# Required-Start: mountdevsubfs +# Required-Stop: mountdevsubfs +# Should-Stop: umountfs +# Default-Start: S +# X-Start-Before: checkroot +# Default-Stop: 0 6 +# Short-Description: Sync hardware and system clock time. +### END INIT INFO + +# These defaults are user-overridable in /etc/default/hwclock +BADYEAR=no +HWCLOCKACCESS=yes +HWCLOCKPARS= +HCTOSYS_DEVICE=rtc0 + +# We only want to use the system timezone or else we'll get +# potential inconsistency at startup. +unset TZ + +hwclocksh() +{ + [ ! -x /sbin/hwclock ] && return 0 + [ ! -r /etc/default/rcS ] || . /etc/default/rcS + [ ! -r /etc/default/hwclock ] || . /etc/default/hwclock + + . /lib/lsb/init-functions + verbose_log_action_msg() { [ "$VERBOSE" = no ] || log_action_msg "$@"; } + + case "$BADYEAR" in + no|"") BADYEAR="" ;; + yes) BADYEAR="--badyear" ;; + *) log_action_msg "unknown BADYEAR setting: \"$BADYEAR\""; return 1 ;; + esac + + case "$1" in + start) + # If the admin deleted the hwclock config, create a blank + # template with the defaults. + if [ -w /etc ] && [ ! -f /etc/adjtime ] && [ ! -e /etc/adjtime ]; then + printf "0.0 0 0.0\n0\nUTC\n" > /etc/adjtime + fi + + if [ -d /run/udev ] || [ -d /dev/.udev ]; then + return 0 + fi + + if [ "$HWCLOCKACCESS" != no ]; then + log_action_msg "Setting the system clock" + + # Just for reporting. + if sed '3!d' /etc/adjtime | grep -q '^UTC$'; then + UTC="--utc" + else + UTC= + fi + # Copies Hardware Clock time to System Clock using the correct + # timezone for hardware clocks in local time, and sets kernel + # timezone. DO NOT REMOVE. + if /sbin/hwclock --rtc=/dev/$HCTOSYS_DEVICE --hctosys $HWCLOCKPARS $BADYEAR; then + # Announce the local time. + verbose_log_action_msg "System Clock set to: `date $UTC`" + else + log_warning_msg "Unable to set System Clock to: `date $UTC`" + fi + else + verbose_log_action_msg "Not setting System Clock" + fi + ;; + stop|restart|reload|force-reload) + # + # Updates the Hardware Clock with the System Clock time. + # This will *override* any changes made to the Hardware Clock. + # + # WARNING: If you disable this, any changes to the system + # clock will not be carried across reboots. + # + + if [ "$HWCLOCKACCESS" != no ]; then + log_action_msg "Saving the system clock" + if /sbin/hwclock --rtc=/dev/$HCTOSYS_DEVICE --systohc $HWCLOCKPARS $BADYEAR; then + verbose_log_action_msg "Hardware Clock updated to `date`" + fi + else + verbose_log_action_msg "Not saving System Clock" + fi + ;; + show) + if [ "$HWCLOCKACCESS" != no ]; then + /sbin/hwclock --rtc=/dev/$HCTOSYS_DEVICE --show $HWCLOCKPARS $BADYEAR + fi + ;; + *) + log_success_msg "Usage: hwclock.sh {start|stop|reload|force-reload|show}" + log_success_msg " start sets kernel (system) clock from hardware (RTC) clock" + log_success_msg " stop and reload set hardware (RTC) clock from kernel (system) clock" + return 1 + ;; + esac +} + +hwclocksh "$@" diff --git a/init.d/irqbalance b/init.d/irqbalance new file mode 100755 index 0000000..8ebf8e0 --- /dev/null +++ b/init.d/irqbalance @@ -0,0 +1,93 @@ +#!/bin/sh +### BEGIN INIT INFO +# Provides: irqbalance +# Required-Start: $remote_fs $syslog +# Required-Stop: $remote_fs $syslog +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: daemon to balance interrupts for SMP systems +### END INIT INFO +# irqbalance init script +# August 2003 +# Eric Dorland + +# Based on spamassassin init script + +PATH=/sbin:/bin:/usr/sbin:/usr/bin +DAEMON=/usr/sbin/irqbalance +NAME=irqbalance +SNAME=irqbalance +DESC="SMP IRQ Balancer" +PIDFILE="/run/$NAME.pid" +PNAME="irqbalance" +DOPTIONS="" + +# Defaults - don't touch, edit /etc/default/ +OPTIONS="" +ONESHOT=0 + +test -x $DAEMON || exit 0 + +. /lib/lsb/init-functions + +test -f /etc/default/irqbalance && . /etc/default/irqbalance + +# Beware: irqbalance tries to read and handle environment variables +# directly itself, but since start-stop-daemon clears the env +# we convert the variables to commandline arguments here... +# (Note: in the daemon an option is enabled even if its set to +# e.g. the empty string or 0 or whatever. To disable it should not +# be exported at all!) +# Warning: this will need to be maintained and updated on upgrades +# to new upstream release which might introduce new ones! +if [ ! -z ${IRQBALANCE_ONESHOT+x} ]; then + DOPTIONS="--oneshot" +fi +if [ ! -z ${IRCBALANCE_ARGS+x} ]; then + OPTIONS="$OPTIONS $IRQBALANCE_ARGS" +fi + +case "$1" in + start) + log_begin_msg "Starting $DESC: $NAME" + + pid=$( pidofproc -p $PIDFILE $DAEMON ) + if [ -n "$pid" ] ; then + log_begin_msg ". Already running" + log_end_msg 0 + exit 0 + fi + + start-stop-daemon --start --quiet --oknodo --exec $DAEMON -- --pid=$PIDFILE $OPTIONS $DOPTIONS + + log_end_msg $? + ;; + stop) + log_begin_msg "Stopping $DESC: $NAME" + + start-stop-daemon --stop --quiet --oknodo --exec $DAEMON + rm -f $PIDFILE + + log_end_msg $? + ;; + restart|force-reload) + log_begin_msg "Restarting $DESC: $NAME" + + start-stop-daemon --stop --retry 5 --quiet --oknodo --exec $DAEMON + rm -f $PIDFILE + + start-stop-daemon --start --quiet --oknodo --exec $DAEMON -- --pid=$PIDFILE $OPTIONS $DOPTIONS + + log_end_msg $? + ;; + status) + status_of_proc $DAEMON $NAME + ;; + *) + N=/etc/init.d/$SNAME + echo "Usage: $N {start|stop|restart|force-reload}" >&2 + exit 1 + ;; +esac + +exit 0 diff --git a/init.d/keyboard-setup.sh b/init.d/keyboard-setup.sh new file mode 100755 index 0000000..f1ab5ba --- /dev/null +++ b/init.d/keyboard-setup.sh @@ -0,0 +1,50 @@ +#!/bin/sh +### BEGIN INIT INFO +# Provides: keyboard-setup.sh +# Required-Start: mountkernfs +# Required-Stop: +# X-Start-Before: checkroot +# Default-Start: S +# Default-Stop: +# X-Interactive: true +# Short-Description: Set the console keyboard layout +# Description: Set the console keyboard as early as possible +# so during the file systems checks the administrator +# can interact. At this stage of the boot process +# only the ASCII symbols are supported. +### END INIT INFO + +if [ -f /bin/setupcon ]; then + case "$1" in + stop|status) + # console-setup isn't a daemon + ;; + start|force-reload|restart|reload) + if [ -f /lib/lsb/init-functions ]; then + . /lib/lsb/init-functions + else + log_action_begin_msg () { + echo -n "$@... " + } + + log_action_end_msg () { + if [ "$1" -eq 0 ]; then + echo done. + else + echo failed. + fi + } + fi + log_action_begin_msg "Setting up keyboard layout" + if /lib/console-setup/keyboard-setup.sh; then + log_action_end_msg 0 + else + log_action_end_msg $? + fi + ;; + *) + echo 'Usage: /etc/init.d/keyboard-setup {start|reload|restart|force-reload|stop|status}' + exit 3 + ;; + esac +fi diff --git a/init.d/kmod b/init.d/kmod new file mode 100755 index 0000000..d7ec083 --- /dev/null +++ b/init.d/kmod @@ -0,0 +1,92 @@ +#!/bin/sh -e +### BEGIN INIT INFO +# Provides: kmod +# Required-Start: +# Required-Stop: +# Should-Start: checkroot +# Should-Stop: +# Default-Start: S +# Default-Stop: +# Short-Description: Load the modules listed in /etc/modules. +# Description: Load the modules listed in /etc/modules. +### END INIT INFO + +# Silently exit if the kernel does not support modules. +[ -f /proc/modules ] || exit 0 +[ -x /sbin/modprobe ] || exit 0 + +[ -f /etc/default/rcS ] && . /etc/default/rcS +. /lib/lsb/init-functions + +PATH='/sbin:/bin' + +case "$1" in + start) + ;; + + stop|restart|reload|force-reload) + log_warning_msg "Action '$1' is meaningless for this init script" + exit 0 + ;; + + *) + log_success_msg "Usage: $0 start" + exit 1 +esac + +load_module() { + local module args + module="$1" + args="$2" + + if [ "$VERBOSE" != no ]; then + log_action_msg "Loading kernel module $module" + modprobe $module $args || true + else + modprobe $module $args > /dev/null 2>&1 || true + fi +} + +modules_files() { + local modules_load_dirs='/etc/modules-load.d /run/modules-load.d /usr/local/lib/modules-load.d /usr/lib/modules-load.d /lib/modules-load.d' + local processed=' ' + local add_etc_modules=true + + for dir in $modules_load_dirs; do + [ -d $dir ] || continue + for file in $(run-parts --list --regex='\.conf$' $dir 2> /dev/null || true); do + local base=${file##*/} + if echo -n "$processed" | grep -qF " $base "; then + continue + fi + if [ "$add_etc_modules" -a -L $file \ + -a "$(readlink -f $file)" = /etc/modules ]; then + add_etc_modules= + fi + processed="$processed$base " + echo $file + done + done + + if [ "$add_etc_modules" ]; then + echo /etc/modules + fi +} + +if [ "$VERBOSE" = no ]; then + log_action_begin_msg 'Loading kernel modules' +fi + +files=$(modules_files) +if [ "$files" ] ; then + grep -h '^[^#]' $files | + while read module args; do + [ "$module" ] || continue + load_module "$module" "$args" + done +fi + +if [ "$VERBOSE" = no ]; then + log_action_end_msg 0 +fi + diff --git a/init.d/mysql b/init.d/mysql new file mode 100755 index 0000000..51537d2 --- /dev/null +++ b/init.d/mysql @@ -0,0 +1,191 @@ +#!/bin/bash +# +### BEGIN INIT INFO +# Provides: mysql +# Required-Start: $remote_fs $syslog +# Required-Stop: $remote_fs $syslog +# Should-Start: $network $time +# Should-Stop: $network $time +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: Start and stop the mysql database server daemon +# Description: Controls the main MySQL database server daemon "mysqld" +# and its wrapper script "mysqld_safe". +### END INIT INFO +# +set -e +set -u +${DEBIAN_SCRIPT_DEBUG:+ set -v -x} + +test -x /usr/bin/mysqld_safe || exit 0 + +. /lib/lsb/init-functions + +SELF=$(cd $(dirname $0); pwd -P)/$(basename $0) +CONF=/etc/mysql/my.cnf +MYADMIN="/usr/bin/mysqladmin --defaults-file=/etc/mysql/debian.cnf" + +# priority can be overriden and "-s" adds output to stderr +ERR_LOGGER="logger -p daemon.err -t /etc/init.d/mysql -i" + +# Safeguard (relative paths, core dumps..) +cd / +umask 077 + +# mysqladmin likes to read /root/.my.cnf. This is usually not what I want +# as many admins e.g. only store a password without a username there and +# so break my scripts. +export HOME=/etc/mysql/ + +## Fetch a particular option from mysql's invocation. +# +# Usage: void mysqld_get_param option +mysqld_get_param() { + /usr/sbin/mysqld --print-defaults \ + | tr " " "\n" \ + | grep -- "--$1" \ + | tail -n 1 \ + | cut -d= -f2 +} + +## Do some sanity checks before even trying to start mysqld. +sanity_checks() { + # check for config file + if [ ! -r /etc/mysql/my.cnf ]; then + log_warning_msg "$0: WARNING: /etc/mysql/my.cnf cannot be read. See README.Debian.gz" + echo "WARNING: /etc/mysql/my.cnf cannot be read. See README.Debian.gz" | $ERR_LOGGER + fi + + # check for diskspace shortage + datadir=`mysqld_get_param datadir` + if LC_ALL=C BLOCKSIZE= df --portability $datadir/. | tail -n 1 | awk '{ exit ($4>4096) }'; then + log_failure_msg "$0: ERROR: The partition with $datadir is too full!" + echo "ERROR: The partition with $datadir is too full!" | $ERR_LOGGER + exit 1 + fi +} + +## Checks if there is a server running and if so if it is accessible. +# +# check_alive insists on a pingable server +# check_dead also fails if there is a lost mysqld in the process list +# +# Usage: boolean mysqld_status [check_alive|check_dead] [warn|nowarn] +mysqld_status () { + ping_output=`$MYADMIN ping 2>&1`; ping_alive=$(( ! $? )) + + ps_alive=0 + pidfile=`mysqld_get_param pid-file` + if [ -f "$pidfile" ] && ps `cat $pidfile` >/dev/null 2>&1; then ps_alive=1; fi + + if [ "$1" = "check_alive" -a $ping_alive = 1 ] || + [ "$1" = "check_dead" -a $ping_alive = 0 -a $ps_alive = 0 ]; then + return 0 # EXIT_SUCCESS + else + if [ "$2" = "warn" ]; then + echo -e "$ps_alive processes alive and '$MYADMIN ping' resulted in\n$ping_output\n" | $ERR_LOGGER -p daemon.debug + fi + return 1 # EXIT_FAILURE + fi +} + +# +# main() +# + +case "${1:-''}" in + 'start') + sanity_checks; + # Start daemon + log_daemon_msg "Starting MySQL database server" "mysqld" + if mysqld_status check_alive nowarn; then + log_progress_msg "already running" + log_end_msg 0 + else + # Could be removed during boot + test -e /var/run/mysqld || install -m 755 -o mysql -g root -d /var/run/mysqld + + # Start MySQL! + su - mysql -s /bin/sh -c "/usr/bin/mysqld_safe > /dev/null 2>&1 &" + + # 6s was reported in #352070 to be too few when using ndbcluster + # 14s was reported in #736452 to be too few with large installs + for i in $(seq 1 30); do + sleep 1 + if mysqld_status check_alive nowarn ; then break; fi + log_progress_msg "." + done + if mysqld_status check_alive warn; then + log_end_msg 0 + # Now start mysqlcheck or whatever the admin wants. + output=$(/etc/mysql/debian-start) + [ -n "$output" ] && log_action_msg "$output" + else + log_end_msg 1 + log_failure_msg "Please take a look at the syslog" + fi + fi + ;; + + 'stop') + # * As a passwordless mysqladmin (e.g. via ~/.my.cnf) must be possible + # at least for cron, we can rely on it here, too. (although we have + # to specify it explicit as e.g. sudo environments points to the normal + # users home and not /root) + log_daemon_msg "Stopping MySQL database server" "mysqld" + if ! mysqld_status check_dead nowarn; then + set +e + shutdown_out=`$MYADMIN shutdown 2>&1`; r=$? + set -e + if [ "$r" -ne 0 ]; then + log_end_msg 1 + [ "$VERBOSE" != "no" ] && log_failure_msg "Error: $shutdown_out" + log_daemon_msg "Killing MySQL database server by signal" "mysqld" + killall -15 mysqld + server_down= + for i in 1 2 3 4 5 6 7 8 9 10; do + sleep 1 + if mysqld_status check_dead nowarn; then server_down=1; break; fi + done + if test -z "$server_down"; then killall -9 mysqld; fi + fi + fi + + if ! mysqld_status check_dead warn; then + log_end_msg 1 + log_failure_msg "Please stop MySQL manually and read /usr/share/doc/mysql-server-5.7/README.Debian.gz!" + exit -1 + else + log_end_msg 0 + fi + ;; + + 'restart') + set +e; $SELF stop; set -e + $SELF start + ;; + + 'reload'|'force-reload') + log_daemon_msg "Reloading MySQL database server" "mysqld" + $MYADMIN reload + log_end_msg 0 + ;; + + 'status') + if mysqld_status check_alive nowarn; then + log_action_msg "$($MYADMIN version)" + else + log_action_msg "MySQL is stopped." + exit 3 + fi + ;; + + *) + echo "Usage: $SELF start|stop|restart|reload|force-reload|status" + exit 1 + ;; +esac + +# Some success paths end up returning non-zero so exit 0 explicitly. See +# bug #739846. +exit 0 diff --git a/init.d/plymouth b/init.d/plymouth new file mode 100755 index 0000000..64ee8d2 --- /dev/null +++ b/init.d/plymouth @@ -0,0 +1,89 @@ +#!/bin/sh + +### BEGIN INIT INFO +# Provides: plymouth +# Required-Start: udev $remote_fs $all +# Required-Stop: $remote_fs +# Should-Start: $x-display-manager +# Should-Stop: $x-display-manager +# Default-Start: 2 3 4 5 +# Default-Stop: 0 6 +# Short-Description: Stop plymouth during boot and start it on shutdown +### END INIT INFO + +PATH="/sbin:/bin:/usr/sbin:/usr/bin" +NAME="plymouth" +DESC="Boot splash manager" + +test -x /sbin/plymouthd || exit 0 + +if [ -r "/etc/default/${NAME}" ] +then + . "/etc/default/${NAME}" +fi + +. /lib/lsb/init-functions + +set -e + +SPLASH="true" +for ARGUMENT in $(cat /proc/cmdline) +do + case "${ARGUMENT}" in + splash*) + SPLASH="true" + ;; + + nosplash*|plymouth.enable=0) + SPLASH="false" + ;; + esac +done + +case "${1}" in + start) + case "${SPLASH}" in + true) + /bin/plymouth quit --retain-splash + ;; + esac + ;; + + stop) + case "${SPLASH}" in + true) + if ! plymouth --ping + then + /sbin/plymouthd --mode=shutdown + fi + + RUNLEVEL="$(/sbin/runlevel | cut -d " " -f 2)" + + case "${RUNLEVEL}" in + 0) + TEXT="Shutting down system..." + ;; + + 6) + TEXT="Restarting system..." + ;; + esac + + /bin/plymouth message --text="${TEXT}" + + /bin/plymouth --show-splash + ;; + esac + ;; + + restart|force-reload) + + ;; + + *) + echo "Usage: ${0} {start|stop|restart|force-reload}" >&2 + exit 1 + ;; +esac + +exit 0 diff --git a/init.d/plymouth-log b/init.d/plymouth-log new file mode 100755 index 0000000..a0adb55 --- /dev/null +++ b/init.d/plymouth-log @@ -0,0 +1,47 @@ +#!/bin/sh + +### BEGIN INIT INFO +# Provides: plymouth-log +# Required-Start: $local_fs $remote_fs +# Required-Stop: $local_fs $remote_fs +# Should-Start: +# Should-Stop: +# Default-Start: S +# Default-Stop: +# Short-Description: Inform plymouth that /var/log is writable +### END INIT INFO + +PATH="/sbin:/bin:/usr/sbin:/usr/bin" +NAME="plymouth-log" +DESC="Boot splash manager (write log file)" + +test -x /bin/plymouth || exit 0 + +if [ -r "/etc/default/${NAME}" ] +then + . "/etc/default/${NAME}" +fi + +. /lib/lsb/init-functions + +set -e + +case "${1}" in + start) + if plymouth --ping + then + /bin/plymouth update-root-fs --read-write + fi + ;; + + stop|restart|force-reload) + + ;; + + *) + echo "Usage: ${0} {start|stop|restart|force-reload}" >&2 + exit 1 + ;; +esac + +exit 0 diff --git a/init.d/postfix b/init.d/postfix new file mode 100755 index 0000000..d783085 --- /dev/null +++ b/init.d/postfix @@ -0,0 +1,141 @@ +#!/bin/sh -e + +# Start or stop Postfix +# +# LaMont Jones +# based on sendmail's init.d script + +### BEGIN INIT INFO +# Provides: postfix mail-transport-agent +# Required-Start: $local_fs $remote_fs $syslog $named $network $time +# Required-Stop: $local_fs $remote_fs $syslog $named $network +# Should-Start: postgresql mysql clamav-daemon postgrey spamassassin saslauthd dovecot +# Should-Stop: postgresql mysql clamav-daemon postgrey spamassassin saslauthd dovecot +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: Postfix Mail Transport Agent +# Description: postfix is a Mail Transport agent +### END INIT INFO + +PATH=/bin:/usr/bin:/sbin:/usr/sbin +DAEMON=/usr/sbin/postfix +NAME=Postfix +TZ= +unset TZ + +test -x $DAEMON && test -f /etc/postfix/main.cf || exit 0 + +. /lib/lsb/init-functions +#DISTRO=$(lsb_release -is 2>/dev/null || echo Debian) + +enabled_instances() { + postmulti -l -a | awk '($3=="y") { print $1}' +} + +running() { + INSTANCE="$1" + if [ "X$INSTANCE" = X ]; then + POSTCONF="postconf" + else + POSTCONF="postmulti -i $INSTANCE -x postconf" + fi + + queue=$($POSTCONF -hx queue_directory 2>/dev/null || echo /var/spool/postfix) + daemondir=$($POSTCONF -hx daemon_directory 2>/dev/null || echo /usr/lib/postfix/sbin) + if [ -f ${queue}/pid/master.pid ]; then + pid=$(sed 's/ //g' ${queue}/pid/master.pid) + # what directory does the executable live in. stupid prelink systems. + dir=$(ls -l /proc/$pid/exe 2>/dev/null | sed 's/.* -> //; s/\/[^\/]*$//') + if [ "X$dir" = "X${daemondir}" ]; then + echo y + fi + fi +} + +case "$1" in + start) + log_daemon_msg "Starting Postfix Mail Transport Agent" postfix + RET=0 + # for all instances that are not already running, handle chroot setup if needed, and start + for INSTANCE in $(enabled_instances); do + RUNNING=$(running $INSTANCE) + if [ "X$RUNNING" = X ]; then + /usr/lib/postfix/configure-instance.sh $INSTANCE + CMD="/usr/sbin/postmulti -- -i $INSTANCE -x ${DAEMON}" + if ! start-stop-daemon --start --exec $CMD quiet-quick-start; then + RET=1 + fi + fi + done + log_end_msg $RET + ;; + + stop) + log_daemon_msg "Stopping Postfix Mail Transport Agent" postfix + RET=0 + # for all instances that are not already running, handle chroot setup if needed, and start + for INSTANCE in $(enabled_instances); do + RUNNING=$(running $INSTANCE) + if [ "X$RUNNING" != X ]; then + CMD="/usr/sbin/postmulti -i $INSTANCE -x ${DAEMON}" + if ! ${CMD} quiet-stop; then + RET=1 + fi + fi + done + log_end_msg $RET + ;; + + restart) + $0 stop + $0 start + ;; + + force-reload|reload) + log_action_begin_msg "Reloading Postfix configuration" + if ${DAEMON} quiet-reload; then + log_action_end_msg 0 + else + log_action_end_msg 1 + fi + ;; + + status) + ALL=1 + ANY=0 + # for all instances that are not already running, handle chroot setup if needed, and start + for INSTANCE in $(enabled_instances); do + RUNNING=$(running $INSTANCE) + if [ "X$RUNNING" != X ]; then + ANY=1 + else + ALL=0 + fi + done + # handle the case when postmulti returns *no* configured instances + if [ $ANY = 0 ]; then + ALL=0 + fi + if [ $ALL = 1 ]; then + log_success_msg "postfix is running" + exit 0 + elif [ $ANY = 1 ]; then + log_success_msg "some postfix instances are running" + exit 0 + else + log_success_msg "postfix is not running" + exit 3 + fi + ;; + + flush|check|abort) + ${DAEMON} $1 + ;; + + *) + log_action_msg "Usage: /etc/init.d/postfix {start|stop|restart|reload|flush|check|abort|force-reload|status}" + exit 1 + ;; +esac + +exit 0 diff --git a/init.d/procps b/init.d/procps new file mode 100755 index 0000000..4d7f4ce --- /dev/null +++ b/init.d/procps @@ -0,0 +1,34 @@ +#! /bin/sh +# kFreeBSD do not accept scripts as interpreters, using #!/bin/sh and sourcing. +if [ true != "$INIT_D_SCRIPT_SOURCED" ] ; then + set "$0" "$@"; INIT_D_SCRIPT_SOURCED=true . /lib/init/init-d-script +fi +### BEGIN INIT INFO +# Provides: procps +# Required-Start: mountkernfs $local_fs +# Required-Stop: +# Should-Start: udev module-init-tools +# X-Start-Before: $network +# Default-Start: S +# Default-Stop: +# Short-Description: Configure kernel parameters at boottime +# Description: Loads kernel parameters that are specified in /etc/sysctl.conf +### END INIT INFO +# +# written by Elrond + +DESC="Setting kernel variables" +DAEMON=/sbin/sysctl +PIDFILE=none + +# Comment this out for sysctl to print every item changed +QUIET_SYSCTL="-q" + +do_start_cmd() { + STATUS=0 + $DAEMON $QUIET_SYSCTL --system || STATUS=$? + return $STATUS +} + +do_stop() { return 0; } +do_status() { return 0; } diff --git a/init.d/rsync b/init.d/rsync new file mode 100755 index 0000000..3bf5167 --- /dev/null +++ b/init.d/rsync @@ -0,0 +1,152 @@ +#! /bin/sh + +### BEGIN INIT INFO +# Provides: rsyncd +# Required-Start: $remote_fs $syslog +# Required-Stop: $remote_fs $syslog +# Should-Start: $named autofs +# Default-Start: 2 3 4 5 +# Default-Stop: +# Short-Description: fast remote file copy program daemon +# Description: rsync is a program that allows files to be copied to and +# from remote machines in much the same way as rcp. +# This provides rsyncd daemon functionality. +### END INIT INFO + +set -e + +# /etc/init.d/rsync: start and stop the rsync daemon + +DAEMON=/usr/bin/rsync +RSYNC_ENABLE=false +RSYNC_OPTS='' +RSYNC_DEFAULTS_FILE=/etc/default/rsync +RSYNC_CONFIG_FILE=/etc/rsyncd.conf +RSYNC_PID_FILE=/var/run/rsync.pid +RSYNC_NICE_PARM='' +RSYNC_IONICE_PARM='' + +test -x $DAEMON || exit 0 + +. /lib/lsb/init-functions + +if [ -s $RSYNC_DEFAULTS_FILE ]; then + . $RSYNC_DEFAULTS_FILE + case "x$RSYNC_ENABLE" in + xtrue|xfalse) ;; + xinetd) exit 0 + ;; + *) log_failure_msg "Value of RSYNC_ENABLE in $RSYNC_DEFAULTS_FILE must be either 'true' or 'false';" + log_failure_msg "not starting rsync daemon." + exit 1 + ;; + esac + case "x$RSYNC_NICE" in + x[0-9]|x1[0-9]) RSYNC_NICE_PARM="--nicelevel $RSYNC_NICE";; + x) ;; + *) log_warning_msg "Value of RSYNC_NICE in $RSYNC_DEFAULTS_FILE must be a value between 0 and 19 (inclusive);" + log_warning_msg "ignoring RSYNC_NICE now." + ;; + esac + case "x$RSYNC_IONICE" in + x-c[123]*) RSYNC_IONICE_PARM="$RSYNC_IONICE";; + x) ;; + *) log_warning_msg "Value of RSYNC_IONICE in $RSYNC_DEFAULTS_FILE must be -c1, -c2 or -c3;" + log_warning_msg "ignoring RSYNC_IONICE now." + ;; + esac +fi + +export PATH="${PATH:+$PATH:}/usr/sbin:/sbin" + +rsync_start() { + if [ ! -s "$RSYNC_CONFIG_FILE" ]; then + log_failure_msg "missing or empty config file $RSYNC_CONFIG_FILE" + log_end_msg 1 + exit 0 + fi + # See ionice(1) + if [ -n "$RSYNC_IONICE_PARM" ] && [ -x /usr/bin/ionice ] && + /usr/bin/ionice "$RSYNC_IONICE_PARM" true 2>/dev/null; then + /usr/bin/ionice "$RSYNC_IONICE_PARM" -p$$ > /dev/null 2>&1 + fi + if start-stop-daemon --start --quiet --background \ + --pidfile $RSYNC_PID_FILE --make-pidfile \ + $RSYNC_NICE_PARM --exec $DAEMON \ + -- --no-detach --daemon --config "$RSYNC_CONFIG_FILE" $RSYNC_OPTS + then + rc=0 + sleep 1 + if ! kill -0 $(cat $RSYNC_PID_FILE) >/dev/null 2>&1; then + log_failure_msg "rsync daemon failed to start" + rc=1 + fi + else + rc=1 + fi + if [ $rc -eq 0 ]; then + log_end_msg 0 + else + log_end_msg 1 + rm -f $RSYNC_PID_FILE + fi +} # rsync_start + + +case "$1" in + start) + if "$RSYNC_ENABLE"; then + log_daemon_msg "Starting rsync daemon" "rsync" + if [ -s $RSYNC_PID_FILE ] && kill -0 $(cat $RSYNC_PID_FILE) >/dev/null 2>&1; then + log_progress_msg "apparently already running" + log_end_msg 0 + exit 0 + fi + rsync_start + else + if [ -s "$RSYNC_CONFIG_FILE" ]; then + [ "$VERBOSE" != no ] && log_warning_msg "rsync daemon not enabled in $RSYNC_DEFAULTS_FILE, not starting..." + fi + fi + ;; + stop) + log_daemon_msg "Stopping rsync daemon" "rsync" + start-stop-daemon --stop --quiet --oknodo --pidfile $RSYNC_PID_FILE + log_end_msg $? + rm -f $RSYNC_PID_FILE + ;; + + reload|force-reload) + log_warning_msg "Reloading rsync daemon: not needed, as the daemon" + log_warning_msg "re-reads the config file whenever a client connects." + ;; + + restart) + set +e + if $RSYNC_ENABLE; then + log_daemon_msg "Restarting rsync daemon" "rsync" + if [ -s $RSYNC_PID_FILE ] && kill -0 $(cat $RSYNC_PID_FILE) >/dev/null 2>&1; then + start-stop-daemon --stop --quiet --oknodo --pidfile $RSYNC_PID_FILE || true + sleep 1 + else + log_warning_msg "rsync daemon not running, attempting to start." + rm -f $RSYNC_PID_FILE + fi + rsync_start + else + if [ -s "$RSYNC_CONFIG_FILE" ]; then + [ "$VERBOSE" != no ] && log_warning_msg "rsync daemon not enabled in $RSYNC_DEFAULTS_FILE, not starting..." + fi + fi + ;; + + status) + status_of_proc -p $RSYNC_PID_FILE "$DAEMON" rsync + exit $? # notreached due to set -e + ;; + *) + echo "Usage: /etc/init.d/rsync {start|stop|reload|force-reload|restart|status}" + exit 1 +esac + +exit 0 diff --git a/init.d/rsyslog b/init.d/rsyslog new file mode 100755 index 0000000..14017cf --- /dev/null +++ b/init.d/rsyslog @@ -0,0 +1,129 @@ +#! /bin/sh +### BEGIN INIT INFO +# Provides: rsyslog +# Required-Start: $remote_fs $time +# Required-Stop: umountnfs $time +# X-Stop-After: sendsigs +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: enhanced syslogd +# Description: Rsyslog is an enhanced multi-threaded syslogd. +# It is quite compatible to stock sysklogd and can be +# used as a drop-in replacement. +### END INIT INFO + +# +# Author: Michael Biebl +# + +# PATH should only include /usr/* if it runs after the mountnfs.sh script +PATH=/sbin:/usr/sbin:/bin:/usr/bin +DESC="enhanced syslogd" +NAME=rsyslog + +RSYSLOGD=rsyslogd +DAEMON=/usr/sbin/rsyslogd +PIDFILE=/run/rsyslogd.pid + +SCRIPTNAME=/etc/init.d/$NAME + +# Exit if the package is not installed +[ -x "$DAEMON" ] || exit 0 + +# Read configuration variable file if it is present +[ -r /etc/default/$NAME ] && . /etc/default/$NAME + +# Define LSB log_* functions. +. /lib/lsb/init-functions + +do_start() +{ + # Return + # 0 if daemon has been started + # 1 if daemon was already running + # other if daemon could not be started or a failure occured + start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- $RSYSLOGD_OPTIONS +} + +do_stop() +{ + # Return + # 0 if daemon has been stopped + # 1 if daemon was already stopped + # other if daemon could not be stopped or a failure occurred + start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE --exec $DAEMON +} + +# +# Tell rsyslogd to close all open files +# +do_rotate() { + start-stop-daemon --stop --signal HUP --quiet --pidfile $PIDFILE --exec $DAEMON +} + +create_xconsole() { + XCONSOLE=/dev/xconsole + if [ "$(uname -s)" != "Linux" ]; then + XCONSOLE=/run/xconsole + ln -sf $XCONSOLE /dev/xconsole + fi + if [ ! -e $XCONSOLE ]; then + mknod -m 640 $XCONSOLE p + chown root:adm $XCONSOLE + [ -x /sbin/restorecon ] && /sbin/restorecon $XCONSOLE + fi +} + +sendsigs_omit() { + OMITDIR=/run/sendsigs.omit.d + mkdir -p $OMITDIR + ln -sf $PIDFILE $OMITDIR/rsyslog +} + +case "$1" in + start) + log_daemon_msg "Starting $DESC" "$RSYSLOGD" + create_xconsole + do_start + case "$?" in + 0) sendsigs_omit + log_end_msg 0 ;; + 1) log_progress_msg "already started" + log_end_msg 0 ;; + *) log_end_msg 1 ;; + esac + + ;; + stop) + log_daemon_msg "Stopping $DESC" "$RSYSLOGD" + do_stop + case "$?" in + 0) log_end_msg 0 ;; + 1) log_progress_msg "already stopped" + log_end_msg 0 ;; + *) log_end_msg 1 ;; + esac + + ;; + rotate) + log_daemon_msg "Closing open files" "$RSYSLOGD" + do_rotate + log_end_msg $? + ;; + restart|force-reload) + $0 stop + $0 start + ;; + try-restart) + $0 status >/dev/null 2>&1 && $0 restart + ;; + status) + status_of_proc -p $PIDFILE $DAEMON $RSYSLOGD && exit 0 || exit $? + ;; + *) + echo "Usage: $SCRIPTNAME {start|stop|rotate|restart|force-reload|try-restart|status}" >&2 + exit 3 + ;; +esac + +: diff --git a/init.d/ssh b/init.d/ssh new file mode 100755 index 0000000..f250008 --- /dev/null +++ b/init.d/ssh @@ -0,0 +1,162 @@ +#! /bin/sh + +### BEGIN INIT INFO +# Provides: sshd +# Required-Start: $remote_fs $syslog +# Required-Stop: $remote_fs $syslog +# Default-Start: 2 3 4 5 +# Default-Stop: +# Short-Description: OpenBSD Secure Shell server +### END INIT INFO + +set -e + +# /etc/init.d/ssh: start and stop the OpenBSD "secure shell(tm)" daemon + +test -x /usr/sbin/sshd || exit 0 +( /usr/sbin/sshd -\? 2>&1 | grep -q OpenSSH ) 2>/dev/null || exit 0 + +umask 022 + +if test -f /etc/default/ssh; then + . /etc/default/ssh +fi + +. /lib/lsb/init-functions + +if [ -n "$2" ]; then + SSHD_OPTS="$SSHD_OPTS $2" +fi + +# Are we running from init? +run_by_init() { + ([ "$previous" ] && [ "$runlevel" ]) || [ "$runlevel" = S ] +} + +check_for_no_start() { + # forget it if we're trying to start, and /etc/ssh/sshd_not_to_be_run exists + if [ -e /etc/ssh/sshd_not_to_be_run ]; then + if [ "$1" = log_end_msg ]; then + log_end_msg 0 || true + fi + if ! run_by_init; then + log_action_msg "OpenBSD Secure Shell server not in use (/etc/ssh/sshd_not_to_be_run)" || true + fi + exit 0 + fi +} + +check_dev_null() { + if [ ! -c /dev/null ]; then + if [ "$1" = log_end_msg ]; then + log_end_msg 1 || true + fi + if ! run_by_init; then + log_action_msg "/dev/null is not a character device!" || true + fi + exit 1 + fi +} + +check_privsep_dir() { + # Create the PrivSep empty dir if necessary + if [ ! -d /run/sshd ]; then + mkdir /run/sshd + chmod 0755 /run/sshd + fi +} + +check_config() { + if [ ! -e /etc/ssh/sshd_not_to_be_run ]; then + /usr/sbin/sshd $SSHD_OPTS -t || exit 1 + fi +} + +export PATH="${PATH:+$PATH:}/usr/sbin:/sbin" + +case "$1" in + start) + check_privsep_dir + check_for_no_start + check_dev_null + log_daemon_msg "Starting OpenBSD Secure Shell server" "sshd" || true + if start-stop-daemon --start --quiet --oknodo --pidfile /run/sshd.pid --exec /usr/sbin/sshd -- $SSHD_OPTS; then + log_end_msg 0 || true + else + log_end_msg 1 || true + fi + ;; + stop) + log_daemon_msg "Stopping OpenBSD Secure Shell server" "sshd" || true + if start-stop-daemon --stop --quiet --oknodo --pidfile /run/sshd.pid; then + log_end_msg 0 || true + else + log_end_msg 1 || true + fi + ;; + + reload|force-reload) + check_for_no_start + check_config + log_daemon_msg "Reloading OpenBSD Secure Shell server's configuration" "sshd" || true + if start-stop-daemon --stop --signal 1 --quiet --oknodo --pidfile /run/sshd.pid --exec /usr/sbin/sshd; then + log_end_msg 0 || true + else + log_end_msg 1 || true + fi + ;; + + restart) + check_privsep_dir + check_config + log_daemon_msg "Restarting OpenBSD Secure Shell server" "sshd" || true + start-stop-daemon --stop --quiet --oknodo --retry 30 --pidfile /run/sshd.pid + check_for_no_start log_end_msg + check_dev_null log_end_msg + if start-stop-daemon --start --quiet --oknodo --pidfile /run/sshd.pid --exec /usr/sbin/sshd -- $SSHD_OPTS; then + log_end_msg 0 || true + else + log_end_msg 1 || true + fi + ;; + + try-restart) + check_privsep_dir + check_config + log_daemon_msg "Restarting OpenBSD Secure Shell server" "sshd" || true + RET=0 + start-stop-daemon --stop --quiet --retry 30 --pidfile /run/sshd.pid || RET="$?" + case $RET in + 0) + # old daemon stopped + check_for_no_start log_end_msg + check_dev_null log_end_msg + if start-stop-daemon --start --quiet --oknodo --pidfile /run/sshd.pid --exec /usr/sbin/sshd -- $SSHD_OPTS; then + log_end_msg 0 || true + else + log_end_msg 1 || true + fi + ;; + 1) + # daemon not running + log_progress_msg "(not running)" || true + log_end_msg 0 || true + ;; + *) + # failed to stop + log_progress_msg "(failed to stop)" || true + log_end_msg 1 || true + ;; + esac + ;; + + status) + status_of_proc -p /run/sshd.pid /usr/sbin/sshd sshd && exit 0 || exit $? + ;; + + *) + log_action_msg "Usage: /etc/init.d/ssh {start|stop|reload|force-reload|restart|try-restart|status}" || true + exit 1 +esac + +exit 0 diff --git a/init.d/udev b/init.d/udev new file mode 100755 index 0000000..950dd36 --- /dev/null +++ b/init.d/udev @@ -0,0 +1,244 @@ +#!/bin/sh -e +### BEGIN INIT INFO +# Provides: udev +# Required-Start: mountkernfs +# Required-Stop: +# Default-Start: S +# Default-Stop: +# Short-Description: Start systemd-udevd, populate /dev and load drivers. +### END INIT INFO + +# we need to unmount /dev/pts/ and remount it later over the devtmpfs +unmount_devpts() { + if mountpoint -q /dev/pts/; then + umount -n -l /dev/pts/ + fi + + if mountpoint -q /dev/shm/; then + umount -n -l /dev/shm/ + fi +} + +# mount a devtmpfs over /dev, if somebody did not already do it +mount_devtmpfs() { + if grep -E -q "^[^[:space:]]+ /dev devtmpfs" /proc/mounts; then + mount -n -o remount,nosuid,size=$tmpfs_size,mode=0755 -t devtmpfs devtmpfs /dev + return + fi + + if ! mount -n -o nosuid,size=$tmpfs_size,mode=0755 -t devtmpfs devtmpfs /dev; then + log_failure_msg "udev requires devtmpfs support, not started" + log_end_msg 1 + fi + + return 0 +} + +create_dev_makedev() { + if [ -e /sbin/MAKEDEV ]; then + ln -sf /sbin/MAKEDEV /dev/MAKEDEV + else + ln -sf /bin/true /dev/MAKEDEV + fi +} + +supported_kernel() { + case "$(uname -r)" in + 2.[012345].*|2.6.[0-9]|2.6.[0-9][!0-9]*) return 1 ;; + 2.6.[12][0-9]|2.6.[12][0-9][!0-9]*) return 1 ;; + 2.6.3[0-1]|2.6.3[0-1][!0-9]*) return 1 ;; + esac + return 0 +} + +# shell version of /usr/bin/tty +my_tty() { + [ -x /bin/readlink ] || return 0 + [ -e /proc/self/fd/0 ] || return 0 + readlink --silent /proc/self/fd/0 || true +} + +warn_if_interactive() { + if [ "$RUNLEVEL" = "S" -a "$PREVLEVEL" = "N" ]; then + return + fi + + TTY=$(my_tty) + if [ -z "$TTY" -o "$TTY" = "/dev/console" -o "$TTY" = "/dev/null" ]; then + return + fi + + printf "\n\n\nIt has been detected that the command\n\n\t$0 $*\n\n" + printf "has been run from an interactive shell.\n" + printf "It will probably not do what you expect, so this script will wait\n" + printf "60 seconds before continuing. Press ^C to stop it.\n" + printf "RUNNING THIS COMMAND IS HIGHLY DISCOURAGED!\n\n\n\n" + sleep 60 +} + +make_static_nodes() { + [ -e /lib/modules/$(uname -r)/modules.devname ] || return 0 + [ -x /bin/kmod ] || return 0 + + /bin/kmod static-nodes --format=tmpfiles --output=/proc/self/fd/1 | \ + while read type name mode uid gid age arg; do + [ -e $name ] && continue + case "$type" in + c|b|c!|b!) mknod -m $mode $name $type $(echo $arg | sed 's/:/ /') ;; + d|d!) mkdir $name ;; + *) echo "unparseable line ($type $name $mode $uid $gid $age $arg)" >&2 ;; + esac + + if [ -x /sbin/restorecon ]; then + /sbin/restorecon $name + fi + done +} + + +############################################################################## + +PATH="/sbin:/bin" +NAME="systemd-udevd" +DAEMON="/lib/systemd/systemd-udevd" +DESC="the hotplug events dispatcher" + +[ -x $DAEMON ] || exit 0 + +# defaults +tmpfs_size="10M" + +if [ -e /etc/udev/udev.conf ]; then + . /etc/udev/udev.conf +fi + +. /lib/lsb/init-functions + +if ! supported_kernel; then + log_failure_msg "udev requires a kernel >= 2.6.32, not started" + log_end_msg 1 +fi + +if [ ! -e /proc/filesystems ]; then + log_failure_msg "udev requires a mounted procfs, not started" + log_end_msg 1 +fi + +if ! grep -q '[[:space:]]devtmpfs$' /proc/filesystems; then + log_failure_msg "udev requires devtmpfs support, not started" + log_end_msg 1 +fi + +if [ ! -d /sys/class/ ]; then + log_failure_msg "udev requires a mounted sysfs, not started" + log_end_msg 1 +fi + +if ! ps --no-headers --format args ax | egrep -q '^\['; then + log_warning_msg "udev does not support containers, not started" + exit 0 +fi + +if [ -d /sys/class/mem/null -a ! -L /sys/class/mem/null ] || \ + [ -e /sys/block -a ! -e /sys/class/block ]; then + log_warning_msg "CONFIG_SYSFS_DEPRECATED must not be selected" + log_warning_msg "Booting will continue in 30 seconds but many things will be broken" + sleep 30 +fi + +# When modifying this script, do not forget that between the time that the +# new /dev has been mounted and udevadm trigger has been run there will be +# no /dev/null. This also means that you cannot use the "&" shell command. + +case "$1" in + start) + if [ ! -e "/run/udev/" ]; then + warn_if_interactive + fi + + if [ -w /sys/kernel/uevent_helper ]; then + echo > /sys/kernel/uevent_helper + fi + + if ! mountpoint -q /dev/; then + unmount_devpts + mount_devtmpfs + [ -d /proc/1 ] || mount -n /proc + fi + + make_static_nodes + + # clean up parts of the database created by the initramfs udev + udevadm info --cleanup-db + + # set the SELinux context for devices created in the initramfs + [ -x /sbin/restorecon ] && /sbin/restorecon -R /dev + + log_daemon_msg "Starting $DESC" "$NAME" + if $DAEMON --daemon; then + log_end_msg $? + else + log_warning_msg $? + log_warning_msg "Waiting 15 seconds and trying to continue anyway" + sleep 15 + fi + + log_action_begin_msg "Synthesizing the initial hotplug events" + if udevadm trigger --action=add; then + log_action_end_msg $? + else + log_action_end_msg $? + fi + + create_dev_makedev + + # wait for the systemd-udevd childs to finish + log_action_begin_msg "Waiting for /dev to be fully populated" + if udevadm settle; then + log_action_end_msg 0 + else + log_action_end_msg 0 'timeout' + fi + ;; + + stop) + log_daemon_msg "Stopping $DESC" "$NAME" + if start-stop-daemon --stop --name $NAME --user root --quiet --oknodo --retry 5; then + log_end_msg $? + else + log_end_msg $? + fi + ;; + + restart) + log_daemon_msg "Stopping $DESC" "$NAME" + if start-stop-daemon --stop --name $NAME --user root --quiet --oknodo --retry 5; then + log_end_msg $? + else + log_end_msg $? || true + fi + + log_daemon_msg "Starting $DESC" "$NAME" + if $DAEMON --daemon; then + log_end_msg $? + else + log_end_msg $? + fi + ;; + + reload|force-reload) + udevadm control --reload-rules + ;; + + status) + status_of_proc $DAEMON $NAME && exit 0 || exit $? + ;; + + *) + echo "Usage: /etc/init.d/udev {start|stop|restart|reload|force-reload|status}" >&2 + exit 1 + ;; +esac + +exit 0 + diff --git a/init.d/ufw b/init.d/ufw new file mode 100755 index 0000000..c491994 --- /dev/null +++ b/init.d/ufw @@ -0,0 +1,86 @@ +#!/bin/sh + +### BEGIN INIT INFO +# Provides: ufw +# Required-Start: $local_fs +# Required-Stop: $local_fs +# Default-Start: S +# Default-Stop: 1 +# Short-Description: start firewall +# Description: Start ufw firewall +### END INIT INFO + +set -e + +PATH="/sbin:/bin" + +[ -d /lib/ufw ] || exit 0 + +. /lib/lsb/init-functions + +for s in "/lib/ufw/ufw-init-functions" "/etc/ufw/ufw.conf" "/etc/default/ufw" ; do + if [ -s "$s" ]; then + . "$s" + else + log_failure_msg "Could not find $s (aborting)" + exit 1 + fi +done + +error=0 +case "$1" in +start) + if [ "$ENABLED" = "yes" ] || [ "$ENABLED" = "YES" ]; then + log_action_begin_msg "Starting firewall:" "ufw" + output=`ufw_start` || error="$?" + if [ "$error" = "0" ]; then + log_action_cont_msg "Setting kernel variables ($IPT_SYSCTL)" + fi + if [ ! -z "$output" ]; then + echo "$output" | while read line ; do + log_action_cont_msg "$line" + done + fi + else + log_action_begin_msg "Skip starting firewall:" "ufw (not enabled)" + fi + log_action_end_msg $error + exit $error + ;; +stop) + if [ "$ENABLED" = "yes" ] || [ "$ENABLED" = "YES" ]; then + log_action_begin_msg "Stopping firewall:" "ufw" + output=`ufw_stop` || error="$?" + if [ ! -z "$output" ]; then + log_action_cont_msg "$output" + fi + else + log_action_begin_msg "Skip stopping firewall:" "ufw (not enabled)" + fi + log_action_end_msg $error + exit $error + ;; +restart|force-reload) + log_action_begin_msg "Reloading firewall:" "ufw" + output=`ufw_reload` || error="$?" + if [ ! -z "$output" ]; then + log_action_cont_msg "$output" + fi + log_action_end_msg $error + exit $error + ;; +status) + output=`ufw_status` || error="$?" + if [ ! -z "$output" ]; then + log_action_cont_msg "$output" + fi + log_action_end_msg $error + exit $error + ;; +*) + echo "Usage: /etc/init.d/ufw {start|stop|restart|force-reload|status}" + exit 1 + ;; +esac + +exit 0 diff --git a/init.d/uuidd b/init.d/uuidd new file mode 100755 index 0000000..cb615d1 --- /dev/null +++ b/init.d/uuidd @@ -0,0 +1,62 @@ +#! /bin/sh -e +### BEGIN INIT INFO +# Provides: uuidd +# Required-Start: $time $local_fs $remote_fs +# Required-Stop: $time $local_fs $remote_fs +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: uuidd daemon +# Description: Init script for the uuid generation daemon +### END INIT INFO +# +# Author: "Theodore Ts'o" +# +set -e + +PATH=/bin:/usr/bin:/sbin:/usr/sbin +DAEMON=/usr/sbin/uuidd +UUIDD_USER=uuidd +UUIDD_GROUP=uuidd +UUIDD_DIR=/run/uuidd +PIDFILE=$UUIDD_DIR/uuidd.pid + +test -x $DAEMON || exit 0 + +. /lib/lsb/init-functions + +case "$1" in + start) + log_daemon_msg "Starting uuid generator" "uuidd" + if ! test -d $UUIDD_DIR; then + mkdir -p $UUIDD_DIR + chown -R $UUIDD_USER:$UUIDD_GROUP $UUIDD_DIR + fi + start_daemon -p $PIDFILE $DAEMON + log_end_msg $? + ;; + stop) + log_daemon_msg "Stopping uuid generator" "uuidd" + killproc -p $PIDFILE $DAEMON + log_end_msg $? + ;; + status) + if pidofproc -p $PIDFILE $DAEMON >/dev/null 2>&1; then + echo "$DAEMON is running"; + exit 0; + else + echo "$DAEMON is NOT running"; + if test -f $PIDFILE; then exit 2; fi + exit 3; + fi + ;; + force-reload|restart) + $0 stop + $0 start + ;; + *) + echo "Usage: /etc/init.d/uuidd {start|stop|restart|force-reload}" + exit 1 + ;; +esac + +exit 0 diff --git a/init.d/webmin b/init.d/webmin new file mode 100755 index 0000000..626bb1c --- /dev/null +++ b/init.d/webmin @@ -0,0 +1,82 @@ +#!/bin/sh +# chkconfig: 235 99 10 +# description: web-based administration interface for Unix systems +# +### BEGIN INIT INFO +# Provides: webmin +# Required-Start: $local_fs $network $syslog +# Required-Stop: $local_fs $network +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: web-based administration interface for Unix systems +# Description: Webmin is a web-based interface for system administration +# for Unix. Using Webmin you can configure DNS, Samba, NFS, +# local/remote filesystems and more using your web browser. +### END INIT INFO + +PATH=/sbin:/usr/sbin:/bin:/usr/bin +DESC="web-based administration interface for Unix systems" +NAME=Webmin +PIDFILE=/var/webmin/miniserv.pid +SCRIPTNAME=/etc/init.d/$NAME +START=/etc/webmin/start +STOP=/etc/webmin/stop +RELOAD=/etc/webmin/reload +LOCKFILE=/var/lock/subsys/webmin +CONFFILE=/etc/webmin/miniserv.conf + +case "$1" in +start) + $START >/dev/null 2>&1 /dev/null 2>&1 + fi + ;; +stop) + $STOP + RETVAL=$? + if [ "$RETVAL" = "0" ]; then + rm -f $LOCKFILE + fi + pidfile=`grep "^pidfile=" $CONFFILE | sed -e 's/pidfile=//g'` + if [ "$pidfile" = "" ]; then + pidfile=$PIDFILE + fi + rm -f $pidfile + ;; +status) + pidfile=`grep "^pidfile=" $CONFFILE | sed -e 's/pidfile=//g'` + if [ "$pidfile" = "" ]; then + pidfile=$PIDFILE + fi + if [ -s $pidfile ]; then + pid=`cat $pidfile` + kill -0 $pid >/dev/null 2>&1 + if [ "$?" = "0" ]; then + echo "$NAME (pid $pid) is running" + RETVAL=0 + else + echo "$NAME is stopped" + RETVAL=1 + fi + else + echo "$NAME is stopped" + RETVAL=1 + fi + ;; +restart) + $STOP ; $START + RETVAL=$? + ;; +reload|force-reload) + $RELOAD + RETVAL=$? + ;; +*) + echo "Usage: $0 {start|stop|restart|reload|force-reload|status}" >&2 + RETVAL=1 + ;; +esac +exit $RETVAL + diff --git a/init/mysql.conf b/init/mysql.conf new file mode 100644 index 0000000..fa7f208 --- /dev/null +++ b/init/mysql.conf @@ -0,0 +1,63 @@ +description "MySQL 5.7 Server" +author "Mario Limonciello " + +start on runlevel [2345] +stop on starting rc RUNLEVEL=[016] + +respawn +respawn limit 2 5 + +env HOME=/etc/mysql +umask 007 + +# The default of 5 seconds is too low for mysql which needs to flush buffers +kill timeout 300 + +pre-start script + ## Fetch a particular option from mysql's invocation. + # Usage: void mysqld_get_param option + mysqld_get_param() { + /usr/sbin/mysqld --print-defaults \ + | tr " " "\n" \ + | grep -- "--$1" \ + | tail -n 1 \ + | cut -d= -f2 + } + + # priority can be overriden and "-s" adds output to stderr + ERR_LOGGER="logger -p daemon.err -t /etc/init/mysql.conf -i" + + #Sanity checks + [ -r $HOME/my.cnf ] + [ -d /var/run/mysqld ] || install -m 755 -o mysql -g root -d /var/run/mysqld + /lib/init/apparmor-profile-load usr.sbin.mysqld + + # check for diskspace shortage + datadir=`mysqld_get_param datadir` + BLOCKSIZE=`LC_ALL=C df --portability $datadir/. | tail -n 1 | awk '{print $4}'` + if [ $BLOCKSIZE -le 4096 ] ; then + echo "$0: ERROR: The partition with $datadir is too full!" >&2 + echo "ERROR: The partition with $datadir is too full!" | $ERR_LOGGER + exit 1 + fi +end script + +exec /usr/sbin/mysqld + +post-start script + for i in `seq 1 30` ; do + /usr/bin/mysqladmin --defaults-file="${HOME}"/debian.cnf ping && { + exec "${HOME}"/debian-start + # should not reach this line + exit 2 + } + statusnow=`status` + if echo $statusnow | grep -q 'stop/' ; then + exit 0 + elif echo $statusnow | grep -q 'respawn/' ; then + exit 1 + fi + sleep 1 + done + exit 1 +end script diff --git a/initramfs-tools/initramfs.conf b/initramfs-tools/initramfs.conf new file mode 100644 index 0000000..04b40bc --- /dev/null +++ b/initramfs-tools/initramfs.conf @@ -0,0 +1,81 @@ +# +# initramfs.conf +# Configuration file for mkinitramfs(8). See initramfs.conf(5). +# +# Note that configuration options from this file can be overridden +# by config files in the /etc/initramfs-tools/conf.d directory. + +# +# MODULES: [ most | netboot | dep | list ] +# +# most - Add most filesystem and all harddrive drivers. +# +# dep - Try and guess which modules to load. +# +# netboot - Add the base modules, network modules, but skip block devices. +# +# list - Only include modules from the 'additional modules' list +# + +MODULES=most + +# +# BUSYBOX: [ y | n | auto ] +# +# Use busybox shell and utilities. If set to n, klibc utilities will be used. +# If set to auto (or unset), busybox will be used if installed and klibc will +# be used otherwise. +# + +BUSYBOX=auto + +# +# COMPCACHE_SIZE: [ "x K" | "x M" | "x G" | "x %" ] +# +# Amount of RAM to use for RAM-based compressed swap space. +# +# An empty value - compcache isn't used, or added to the initramfs at all. +# An integer and K (e.g. 65536 K) - use a number of kilobytes. +# An integer and M (e.g. 256 M) - use a number of megabytes. +# An integer and G (e.g. 1 G) - use a number of gigabytes. +# An integer and % (e.g. 50 %) - use a percentage of the amount of RAM. +# +# You can optionally install the compcache package to configure this setting +# via debconf and have userspace scripts to load and unload compcache. +# + +COMPCACHE_SIZE="" + +# +# COMPRESS: [ gzip | bzip2 | lz4 | lzma | lzop | xz ] +# + +COMPRESS=gzip + +# +# NFS Section of the config. +# + +# +# DEVICE: ... +# +# Specify a specific network interface, like eth0 +# Overridden by optional ip= or BOOTIF= bootarg +# + +DEVICE= + +# +# NFSROOT: [ auto | HOST:MOUNT ] +# + +NFSROOT=auto + +# +# RUNSIZE: ... +# +# The size of the /run tmpfs mount point, like 256M or 10% +# Overridden by optional initramfs.runsize= bootarg +# + +RUNSIZE=10% diff --git a/initramfs-tools/modules b/initramfs-tools/modules new file mode 100644 index 0000000..dd9dc54 --- /dev/null +++ b/initramfs-tools/modules @@ -0,0 +1,11 @@ +# List of modules that you want to include in your initramfs. +# They will be loaded at boot time in the order below. +# +# Syntax: module_name [args ...] +# +# You must run update-initramfs(8) to effect this change. +# +# Examples: +# +# raid1 +# sd_mod diff --git a/initramfs-tools/update-initramfs.conf b/initramfs-tools/update-initramfs.conf new file mode 100644 index 0000000..31823e2 --- /dev/null +++ b/initramfs-tools/update-initramfs.conf @@ -0,0 +1,20 @@ +# +# Configuration file for update-initramfs(8) +# + +# +# update_initramfs [ yes | all | no ] +# +# Default is yes +# If set to all update-initramfs will update all initramfs +# If set to no disables any update to initramfs beside kernel upgrade + +update_initramfs=yes + +# +# backup_initramfs [ yes | no ] +# +# Default is no +# If set to no leaves no .bak backup files. + +backup_initramfs=no diff --git a/inputrc b/inputrc new file mode 100644 index 0000000..d3da985 --- /dev/null +++ b/inputrc @@ -0,0 +1,67 @@ +# /etc/inputrc - global inputrc for libreadline +# See readline(3readline) and `info rluserman' for more information. + +# Be 8 bit clean. +set input-meta on +set output-meta on + +# To allow the use of 8bit-characters like the german umlauts, uncomment +# the line below. However this makes the meta key not work as a meta key, +# which is annoying to those which don't need to type in 8-bit characters. + +# set convert-meta off + +# try to enable the application keypad when it is called. Some systems +# need this to enable the arrow keys. +# set enable-keypad on + +# see /usr/share/doc/bash/inputrc.arrows for other codes of arrow keys + +# do not bell on tab-completion +# set bell-style none +# set bell-style visible + +# some defaults / modifications for the emacs mode +$if mode=emacs + +# allow the use of the Home/End keys +"\e[1~": beginning-of-line +"\e[4~": end-of-line + +# allow the use of the Delete/Insert keys +"\e[3~": delete-char +"\e[2~": quoted-insert + +# mappings for "page up" and "page down" to step to the beginning/end +# of the history +# "\e[5~": beginning-of-history +# "\e[6~": end-of-history + +# alternate mappings for "page up" and "page down" to search the history +# "\e[5~": history-search-backward +# "\e[6~": history-search-forward + +# mappings for Ctrl-left-arrow and Ctrl-right-arrow for word moving +"\e[1;5C": forward-word +"\e[1;5D": backward-word +"\e[5C": forward-word +"\e[5D": backward-word +"\e\e[C": forward-word +"\e\e[D": backward-word + +$if term=rxvt +"\e[7~": beginning-of-line +"\e[8~": end-of-line +"\eOc": forward-word +"\eOd": backward-word +$endif + +# for non RH/Debian xterm, can't hurt for RH/Debian xterm +# "\eOH": beginning-of-line +# "\eOF": end-of-line + +# for freebsd console +# "\e[H": beginning-of-line +# "\e[F": end-of-line + +$endif diff --git a/insserv.conf.d/bind9 b/insserv.conf.d/bind9 new file mode 100644 index 0000000..1861a99 --- /dev/null +++ b/insserv.conf.d/bind9 @@ -0,0 +1 @@ +$named bind9 diff --git a/insserv.conf.d/postfix b/insserv.conf.d/postfix new file mode 100644 index 0000000..ddd0034 --- /dev/null +++ b/insserv.conf.d/postfix @@ -0,0 +1 @@ +$mail-transport-agent postfix diff --git a/iproute2/bpf_pinning b/iproute2/bpf_pinning new file mode 100644 index 0000000..2b39c70 --- /dev/null +++ b/iproute2/bpf_pinning @@ -0,0 +1,6 @@ +# +# subpath mappings from mount point for pinning +# +#3 tracing +#4 foo/bar +#5 tc/cls1 diff --git a/iproute2/ematch_map b/iproute2/ematch_map new file mode 100644 index 0000000..4d6bb2f --- /dev/null +++ b/iproute2/ematch_map @@ -0,0 +1,8 @@ +# lookup table for ematch kinds +1 cmp +2 nbyte +3 u32 +4 meta +7 canid +8 ipset +9 ipt diff --git a/iproute2/group b/iproute2/group new file mode 100644 index 0000000..6f000b2 --- /dev/null +++ b/iproute2/group @@ -0,0 +1,2 @@ +# device group names +0 default diff --git a/iproute2/nl_protos b/iproute2/nl_protos new file mode 100644 index 0000000..7c17cf0 --- /dev/null +++ b/iproute2/nl_protos @@ -0,0 +1,23 @@ +# Netlink protocol names mapping + +0 rtnl +1 unused +2 usersock +3 fw +4 tcpdiag +5 nflog +6 xfrm +7 selinux +8 iscsi +9 audit +10 fiblookup +11 connector +12 nft +13 ip6fw +14 dec-rt +15 uevent +16 genl +18 scsi-trans +19 ecryptfs +20 rdma +21 crypto diff --git a/iproute2/rt_dsfield b/iproute2/rt_dsfield new file mode 100644 index 0000000..1426d60 --- /dev/null +++ b/iproute2/rt_dsfield @@ -0,0 +1,26 @@ +# Differentiated field values +# These include the DSCP and unused bits +0x0 default +# Newer RFC2597 values +0x28 AF11 +0x30 AF12 +0x38 AF13 +0x48 AF21 +0x50 AF22 +0x58 AF23 +0x68 AF31 +0x70 AF32 +0x78 AF33 +0x88 AF41 +0x90 AF42 +0x98 AF43 +# Older values RFC2474 +0x20 CS1 +0x40 CS2 +0x60 CS3 +0x80 CS4 +0xA0 CS5 +0xC0 CS6 +0xE0 CS7 +# RFC 2598 +0xB8 EF diff --git a/iproute2/rt_protos b/iproute2/rt_protos new file mode 100644 index 0000000..b3a0ec8 --- /dev/null +++ b/iproute2/rt_protos @@ -0,0 +1,23 @@ +# +# Reserved protocols. +# +0 unspec +1 redirect +2 kernel +3 boot +4 static +8 gated +9 ra +10 mrt +11 zebra +12 bird +13 dnrouted +14 xorp +15 ntk +16 dhcp +42 babel +186 bgp +187 isis +188 ospf +189 rip +192 eigrp diff --git a/iproute2/rt_protos.d/README b/iproute2/rt_protos.d/README new file mode 100644 index 0000000..f9c599c --- /dev/null +++ b/iproute2/rt_protos.d/README @@ -0,0 +1,2 @@ +Each file in this directory is an rt_protos configuration file. iproute2 +commands scan this directory processing all files that end in '.conf'. diff --git a/iproute2/rt_realms b/iproute2/rt_realms new file mode 100644 index 0000000..eedd76d --- /dev/null +++ b/iproute2/rt_realms @@ -0,0 +1,13 @@ +# +# reserved values +# +0 cosmos +# +# local +# +#1 inr.ac +#2 inr.ruhep +#3 freenet +#4 radio-msu +#5 russia +#6 internet diff --git a/iproute2/rt_scopes b/iproute2/rt_scopes new file mode 100644 index 0000000..8514bc1 --- /dev/null +++ b/iproute2/rt_scopes @@ -0,0 +1,11 @@ +# +# reserved values +# +0 global +255 nowhere +254 host +253 link +# +# pseudo-reserved +# +200 site diff --git a/iproute2/rt_tables b/iproute2/rt_tables new file mode 100644 index 0000000..541abfd --- /dev/null +++ b/iproute2/rt_tables @@ -0,0 +1,11 @@ +# +# reserved values +# +255 local +254 main +253 default +0 unspec +# +# local +# +#1 inr.ruhep diff --git a/iproute2/rt_tables.d/README b/iproute2/rt_tables.d/README new file mode 100644 index 0000000..0920cb1 --- /dev/null +++ b/iproute2/rt_tables.d/README @@ -0,0 +1,2 @@ +Each file in this directory is an rt_tables configuration file. iproute2 +commands scan this directory processing all files that end in '.conf'. diff --git a/issue b/issue new file mode 100644 index 0000000..c304424 --- /dev/null +++ b/issue @@ -0,0 +1,2 @@ +Ubuntu 18.10 \n \l + diff --git a/issue.net b/issue.net new file mode 100644 index 0000000..e27297f --- /dev/null +++ b/issue.net @@ -0,0 +1 @@ +Ubuntu 18.10 diff --git a/kernel-img.conf b/kernel-img.conf new file mode 100644 index 0000000..e818d6e --- /dev/null +++ b/kernel-img.conf @@ -0,0 +1,6 @@ +# Kernel image management overrides +# See kernel-img.conf(5) for details +do_symlinks = yes +do_bootloader = no +do_initrd = yes +link_in_boot = no diff --git a/kernel/postinst.d/apt-auto-removal b/kernel/postinst.d/apt-auto-removal new file mode 100755 index 0000000..2c32b0c --- /dev/null +++ b/kernel/postinst.d/apt-auto-removal @@ -0,0 +1,83 @@ +#!/bin/sh +set -e +# Mark as not-for-autoremoval those kernel packages that are: +# - the currently booted version +# - the kernel version we've been called for +# - the latest kernel version (as determined by debian version number) +# - the second-latest kernel version +# +# In the common case this results in two kernels saved (booted into the +# second-latest kernel, we install the latest kernel in an upgrade), but +# can save up to four. Kernel refers here to a distinct release, which can +# potentially be installed in multiple flavours counting as one kernel. + +eval $(apt-config shell APT_CONF_D Dir::Etc::parts/d) +test -n "${APT_CONF_D}" || APT_CONF_D="/etc/apt/apt.conf.d" +config_file="${APT_CONF_D}/01autoremove-kernels" + +eval $(apt-config shell DPKG Dir::bin::dpkg/f) +test -n "$DPKG" || DPKG="/usr/bin/dpkg" + +list="$("${DPKG}" -l | awk '/^[ih][^nc][ ]+(linux|kfreebsd|gnumach)-image-[0-9]+\./ && $2 !~ /-dbg(:.*)?$/ && $2 !~ /-dbgsym(:.*)?$/ { print $2,$3; }' \ + | sed -e 's#^\(linux\|kfreebsd\|gnumach\)-image-##' -e 's#:[^:]\+ # #')" +debverlist="$(echo "$list" | cut -d' ' -f 2 | sort --unique --reverse --version-sort)" + +if [ -n "$1" ]; then + installed_version="$(echo "$list" | awk "\$1 == \"$1\" { print \$2;exit; }")" +fi +unamer="$(uname -r | tr '[A-Z]' '[a-z]')" +if [ -n "$unamer" ]; then + running_version="$(echo "$list" | awk "\$1 == \"$unamer\" { print \$2;exit; }")" +fi +# ignore the currently running version if attempting a reproducible build +if [ -n "${SOURCE_DATE_EPOCH}" ]; then + unamer="" + running_version="" +fi +latest_version="$(echo "$debverlist" | sed -n 1p)" +previous_version="$(echo "$debverlist" | sed -n 2p)" + +debkernels="$(echo "$latest_version +$installed_version +$running_version +$previous_version" | sort -u | sed -e '/^$/ d')" +kernels="$( (echo "$1 +$unamer"; for deb in $debkernels; do echo "$list" | awk "\$2 == \"$deb\" { print \$1; }"; done; ) \ + | sed -e 's#\([\.\+]\)#\\\1#g' -e '/^$/ d' | sort -u)" + +generateconfig() { + cat < "${config_file}.dpkg-new" +mv -f "${config_file}.dpkg-new" "$config_file" +chmod 444 "$config_file" diff --git a/kernel/postinst.d/initramfs-tools b/kernel/postinst.d/initramfs-tools new file mode 100755 index 0000000..0d463f4 --- /dev/null +++ b/kernel/postinst.d/initramfs-tools @@ -0,0 +1,35 @@ +#!/bin/sh -e + +version="$1" +bootopt="" + +command -v update-initramfs >/dev/null 2>&1 || exit 0 + +# passing the kernel version is required +if [ -z "${version}" ]; then + echo >&2 "W: initramfs-tools: ${DPKG_MAINTSCRIPT_PACKAGE:-kernel package} did not pass a version number" + exit 2 +fi + +# exit if kernel does not need an initramfs +if [ "$INITRD" = 'No' ]; then + exit 0 +fi + +# absolute file name of kernel image may be passed as a second argument; +# create the initrd in the same directory +if [ -n "$2" ]; then + bootdir=$(dirname "$2") + bootopt="-b ${bootdir}" +fi + +# avoid running multiple times +if [ -n "$DEB_MAINT_PARAMS" ]; then + eval set -- "$DEB_MAINT_PARAMS" + if [ -z "$1" ] || [ "$1" != "configure" ]; then + exit 0 + fi +fi + +# we're good - create initramfs. update runs do_bootloader +INITRAMFS_TOOLS_KERNEL_HOOK=1 update-initramfs -c -t -k "${version}" ${bootopt} >&2 diff --git a/kernel/postinst.d/zz-update-grub b/kernel/postinst.d/zz-update-grub new file mode 100755 index 0000000..5ed065f --- /dev/null +++ b/kernel/postinst.d/zz-update-grub @@ -0,0 +1,26 @@ +#! /bin/sh +set -e + +which update-grub >/dev/null 2>&1 || exit 0 + +if type systemd-detect-virt >/dev/null 2>&1 && + systemd-detect-virt --quiet --container; then + exit 0 +fi + +set -- $DEB_MAINT_PARAMS +mode="${1#\'}" +mode="${mode%\'}" +case $0:$mode in + # Only run on postinst configure and postrm remove, to avoid wasting + # time by calling update-grub multiple times on upgrade and removal. + # Also run if we have no DEB_MAINT_PARAMS, in order to work with old + # kernel packages. + */postinst.d/*:|*/postinst.d/*:configure|*/postrm.d/*:|*/postrm.d/*:remove) + if [ -e /boot/grub/grub.cfg ]; then + exec update-grub + fi + ;; +esac + +exit 0 diff --git a/kernel/postrm.d/initramfs-tools b/kernel/postrm.d/initramfs-tools new file mode 100755 index 0000000..d58fa61 --- /dev/null +++ b/kernel/postrm.d/initramfs-tools @@ -0,0 +1,35 @@ +#!/bin/sh -e + +version="$1" +bootopt="" + +[ -x /usr/sbin/update-initramfs ] || exit 0 + +# passing the kernel version is required +if [ -z "${version}" ]; then + echo >&2 "W: initramfs-tools: ${DPKG_MAINTSCRIPT_PACKAGE:-kernel package} did not pass a version number" + exit 0 +fi + +# exit if custom kernel does not need an initramfs +if [ "$INITRD" = 'No' ]; then + exit 0 +fi + +# absolute file name of kernel image may be passed as a second argument; +# create the initrd in the same directory +if [ -n "$2" ]; then + bootdir=$(dirname "$2") + bootopt="-b ${bootdir}" +fi + +# avoid running multiple times +if [ -n "$DEB_MAINT_PARAMS" ]; then + eval set -- "$DEB_MAINT_PARAMS" + if [ -z "$1" ] || [ "$1" != "remove" ]; then + exit 0 + fi +fi + +# delete initramfs +INITRAMFS_TOOLS_KERNEL_HOOK=1 update-initramfs -d -t -k "${version}" ${bootopt} >&2 diff --git a/kernel/postrm.d/zz-update-grub b/kernel/postrm.d/zz-update-grub new file mode 100755 index 0000000..5ed065f --- /dev/null +++ b/kernel/postrm.d/zz-update-grub @@ -0,0 +1,26 @@ +#! /bin/sh +set -e + +which update-grub >/dev/null 2>&1 || exit 0 + +if type systemd-detect-virt >/dev/null 2>&1 && + systemd-detect-virt --quiet --container; then + exit 0 +fi + +set -- $DEB_MAINT_PARAMS +mode="${1#\'}" +mode="${mode%\'}" +case $0:$mode in + # Only run on postinst configure and postrm remove, to avoid wasting + # time by calling update-grub multiple times on upgrade and removal. + # Also run if we have no DEB_MAINT_PARAMS, in order to work with old + # kernel packages. + */postinst.d/*:|*/postinst.d/*:configure|*/postrm.d/*:|*/postrm.d/*:remove) + if [ -e /boot/grub/grub.cfg ]; then + exec update-grub + fi + ;; +esac + +exit 0 diff --git a/kernel/preinst.d/intel-microcode b/kernel/preinst.d/intel-microcode new file mode 100755 index 0000000..d98b40c --- /dev/null +++ b/kernel/preinst.d/intel-microcode @@ -0,0 +1,17 @@ +#!/bin/sh +# +# /etc/kernel/preinst.d script for intel-microcode version 3 +# Copyright (C) 2014 Henrique de Moraes Holschuh +# Released under the GPL v2 or later license +# +# This script makes sure the cpuid module is loaded, before the +# kernel image has a chance to replace it with a new one that +# might not be compatible with the current kernel. +# +# We need the cpuid module for iucode_tool --scan-system, +# which is used by the initramfs hook. +# + +grep -q cpu/cpuid /proc/devices || modprobe -q cpuid || true + +: diff --git a/ld.so.conf b/ld.so.conf new file mode 100644 index 0000000..20c9763 --- /dev/null +++ b/ld.so.conf @@ -0,0 +1,2 @@ +include /etc/ld.so.conf.d/*.conf + diff --git a/ld.so.conf.d/libc.conf b/ld.so.conf.d/libc.conf new file mode 100644 index 0000000..463b8bb --- /dev/null +++ b/ld.so.conf.d/libc.conf @@ -0,0 +1,2 @@ +# libc default configuration +/usr/local/lib diff --git a/ld.so.conf.d/x86_64-linux-gnu.conf b/ld.so.conf.d/x86_64-linux-gnu.conf new file mode 100644 index 0000000..cd691ab --- /dev/null +++ b/ld.so.conf.d/x86_64-linux-gnu.conf @@ -0,0 +1,4 @@ +# Multiarch support +/usr/local/lib/x86_64-linux-gnu +/lib/x86_64-linux-gnu +/usr/lib/x86_64-linux-gnu diff --git a/ldap/ldap.conf b/ldap/ldap.conf new file mode 100644 index 0000000..42d42b0 --- /dev/null +++ b/ldap/ldap.conf @@ -0,0 +1,17 @@ +# +# LDAP Defaults +# + +# See ldap.conf(5) for details +# This file should be world readable but not world writable. + +#BASE dc=example,dc=com +#URI ldap://ldap.example.com ldap://ldap-master.example.com:666 + +#SIZELIMIT 12 +#TIMELIMIT 15 +#DEREF never + +# TLS certificates (needed for GnuTLS) +TLS_CACERT /etc/ssl/certs/ca-certificates.crt + diff --git a/legal b/legal new file mode 100644 index 0000000..cf276aa --- /dev/null +++ b/legal @@ -0,0 +1,8 @@ + +The programs included with the Ubuntu system are free software; +the exact distribution terms for each program are described in the +individual files in /usr/share/doc/*/copyright. + +Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by +applicable law. + diff --git a/libaudit.conf b/libaudit.conf new file mode 100644 index 0000000..90855d7 --- /dev/null +++ b/libaudit.conf @@ -0,0 +1,7 @@ +# This is the configuration file for libaudit tunables. +# It is currently only used for the failure_action tunable. + +# failure_action can be: log, ignore, terminate +failure_action = ignore + + diff --git a/libnl-3/classid b/libnl-3/classid new file mode 100644 index 0000000..2203243 --- /dev/null +++ b/libnl-3/classid @@ -0,0 +1,45 @@ +############################################################################### +# +# ClassID <-> Name Translation Table +# +# This file can be used to assign names to classids for easier reference +# in all libnl tools. +# +# Format: +# # qdisc definition +# # class deifnition +# # class definition referencing an +# existing qdisc definition. +# +# Example: +# 1: top # top -> 1:0 +# top:1 interactive # interactive -> 1:1 +# top:2 www # www -> 1:2 +# top:3 bulk # bulk -> 1:3 +# 2:1 test_class # test_class -> 2:1 +# +# Illegal Example: +# 30:1 classD +# classD:2 invalidClass # classD refers to a class, not a qdisc +# +############################################################################### + +# + +# Reserved default classids +0:0 none +ffff:ffff root +ffff:fff1 ingress + +# +# List your classid definitions here: +# + + + +############################################################################### +# List of auto-generated classids +# +# DO NOT ADD CLASSID DEFINITIONS BELOW THIS LINE +# +# diff --git a/libnl-3/pktloc b/libnl-3/pktloc new file mode 100644 index 0000000..8559161 --- /dev/null +++ b/libnl-3/pktloc @@ -0,0 +1,76 @@ +# +# Location definitions for packet matching +# + +# name alignment offset mask shift +ip.version u8 net+0 0xF0 4 +ip.hdrlen u8 net+0 0x0F +ip.diffserv u8 net+1 +ip.length u16 net+2 +ip.id u16 net+4 +ip.flag.res u8 net+6 0xff 7 +ip.df u8 net+6 0x40 6 +ip.mf u8 net+6 0x20 5 +ip.offset u16 net+6 0x1FFF +ip.ttl u8 net+8 +ip.proto u8 net+9 +ip.chksum u16 net+10 +ip.src u32 net+12 +ip.dst u32 net+16 + +# if ip.ihl > 5 +ip.opts u32 net+20 + + +# +# IP version 6 +# +# name alignment offset mask shift +ip6.version u8 net+0 0xF0 4 +ip6.tc u16 net+0 0xFF0 4 +ip6.flowlabel u32 net+0 0xFFFFF +ip6.length u16 net+4 +ip6.nexthdr u8 net+6 +ip6.hoplimit u8 net+7 +ip6.src 16 net+8 +ip6.dst 16 net+24 + +# +# Transmission Control Protocol (TCP) +# +# name alignment offset mask shift +tcp.sport u16 tcp+0 +tcp.dport u16 tcp+2 +tcp.seq u32 tcp+4 +tcp.ack u32 tcp+8 + +# Data offset (4 bits) +tcp.off u8 tcp+12 0xF0 4 + +# Reserved [0 0 0] (3 bits) +tcp.reserved u8 tcp+12 0x04 1 + +# ECN [N C E] (3 bits) +tcp.ecn u16 tcp+12 0x01C00 6 + +# Individual TCP flags (0|1) (6 bits in total) +tcp.flag.urg u8 tcp+13 0x20 5 +tcp.flag.ack u8 tcp+13 0x10 4 +tcp.flag.psh u8 tcp+13 0x08 3 +tcp.flag.rst u8 tcp+13 0x04 2 +tcp.flag.syn u8 tcp+13 0x02 1 +tcp.flag.fin u8 tcp+13 0x01 + +tcp.win u16 tcp+14 +tcp.csum u16 tcp+16 +tcp.urg u16 tcp+18 +tcp.opts u32 tcp+20 + +# +# User Datagram Protocol (UDP) +# +# name alignment offset mask shift +udp.sport u16 tcp+0 +udp.dport u16 tcp+2 +udp.length u16 tcp+4 +udp.csum u16 tcp+6 diff --git a/lighttpd/conf-available/90-javascript-alias.conf b/lighttpd/conf-available/90-javascript-alias.conf new file mode 100644 index 0000000..a8b442f --- /dev/null +++ b/lighttpd/conf-available/90-javascript-alias.conf @@ -0,0 +1 @@ +alias.url += ("/javascript" => "/usr/share/javascript") diff --git a/lighttpd/conf-enabled/90-javascript-alias.conf b/lighttpd/conf-enabled/90-javascript-alias.conf new file mode 120000 index 0000000..dc909f6 --- /dev/null +++ b/lighttpd/conf-enabled/90-javascript-alias.conf @@ -0,0 +1 @@ +../conf-available/90-javascript-alias.conf \ No newline at end of file diff --git a/locale.alias b/locale.alias new file mode 100644 index 0000000..2b286dd --- /dev/null +++ b/locale.alias @@ -0,0 +1,82 @@ +# Locale name alias data base. +# Copyright (C) 1996-2018 Free Software Foundation, Inc. +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 2, or (at your option) +# any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program; if not, see . + +# The format of this file is the same as for the corresponding file of +# the X Window System, which normally can be found in +# /usr/lib/X11/locale/locale.alias +# A single line contains two fields: an alias and a substitution value. +# All entries are case independent. + +# Note: This file is obsolete and is kept around for the time being for +# backward compatibility. Nobody should rely on the names defined here. +# Locales should always be specified by their full name. + +# Note: This file used to contain the following lines: +# bokmaal nb_NO.ISO-8859-1 +# franc,ais fr_FR.ISO-8859-1 +# except that the "aa" was actually the byte '\0xE5' (the Latin-1 +# encoding for U+00E5 LATIN SMALL LETTER A WITH RING ABOVE) and the +# "c," was actually the byte '\xE7' (the Latin-1 encoding for U+00E7 +# LATIN SMALL LETTER C WITH CEDILLA). These lines were removed +# because they caused 'locale -a' to output text encoded in Latin-1, +# which broke applications in UTF-8 locales. See: +# https://sourceware.org/bugzilla/show_bug.cgi?id=18412 + +bokmal nb_NO.ISO-8859-1 +catalan ca_ES.ISO-8859-1 +croatian hr_HR.ISO-8859-2 +czech cs_CZ.ISO-8859-2 +danish da_DK.ISO-8859-1 +dansk da_DK.ISO-8859-1 +deutsch de_DE.ISO-8859-1 +dutch nl_NL.ISO-8859-1 +eesti et_EE.ISO-8859-15 +estonian et_EE.ISO-8859-15 +finnish fi_FI.ISO-8859-1 +french fr_FR.ISO-8859-1 +galego gl_ES.ISO-8859-1 +galician gl_ES.ISO-8859-1 +german de_DE.ISO-8859-1 +greek el_GR.ISO-8859-7 +hebrew he_IL.ISO-8859-8 +hrvatski hr_HR.ISO-8859-2 +hungarian hu_HU.ISO-8859-2 +icelandic is_IS.ISO-8859-1 +italian it_IT.ISO-8859-1 +japanese ja_JP.eucJP +japanese.euc ja_JP.eucJP +ja_JP ja_JP.eucJP +ja_JP.ujis ja_JP.eucJP +japanese.sjis ja_JP.SJIS +korean ko_KR.eucKR +korean.euc ko_KR.eucKR +ko_KR ko_KR.eucKR +lithuanian lt_LT.ISO-8859-13 +no_NO nb_NO.ISO-8859-1 +no_NO.ISO-8859-1 nb_NO.ISO-8859-1 +norwegian nb_NO.ISO-8859-1 +nynorsk nn_NO.ISO-8859-1 +polish pl_PL.ISO-8859-2 +portuguese pt_PT.ISO-8859-1 +romanian ro_RO.ISO-8859-2 +russian ru_RU.KOI8-R +slovak sk_SK.ISO-8859-2 +slovene sl_SI.ISO-8859-2 +slovenian sl_SI.ISO-8859-2 +spanish es_ES.ISO-8859-1 +swedish sv_SE.ISO-8859-1 +thai th_TH.TIS-620 +turkish tr_TR.ISO-8859-9 diff --git a/locale.gen b/locale.gen new file mode 100644 index 0000000..e3d5487 --- /dev/null +++ b/locale.gen @@ -0,0 +1,505 @@ +# This file lists locales that you wish to have built. You can find a list +# of valid supported locales at /usr/share/i18n/SUPPORTED, and you can add +# user defined locales to /usr/local/share/i18n/SUPPORTED. If you change +# this file, you need to rerun locale-gen. + + +# aa_DJ ISO-8859-1 +# aa_DJ.UTF-8 UTF-8 +# aa_ER UTF-8 +# aa_ER@saaho UTF-8 +# aa_ET UTF-8 +# af_ZA ISO-8859-1 +# af_ZA.UTF-8 UTF-8 +# agr_PE UTF-8 +# ak_GH UTF-8 +# am_ET UTF-8 +# an_ES ISO-8859-15 +# an_ES.UTF-8 UTF-8 +# anp_IN UTF-8 +# ar_AE ISO-8859-6 +# ar_AE.UTF-8 UTF-8 +# ar_BH ISO-8859-6 +# ar_BH.UTF-8 UTF-8 +# ar_DZ ISO-8859-6 +# ar_DZ.UTF-8 UTF-8 +# ar_EG ISO-8859-6 +# ar_EG.UTF-8 UTF-8 +# ar_IN UTF-8 +# ar_IQ ISO-8859-6 +# ar_IQ.UTF-8 UTF-8 +# ar_JO ISO-8859-6 +# ar_JO.UTF-8 UTF-8 +# ar_KW ISO-8859-6 +# ar_KW.UTF-8 UTF-8 +# ar_LB ISO-8859-6 +# ar_LB.UTF-8 UTF-8 +# ar_LY ISO-8859-6 +# ar_LY.UTF-8 UTF-8 +# ar_MA ISO-8859-6 +# ar_MA.UTF-8 UTF-8 +# ar_OM ISO-8859-6 +# ar_OM.UTF-8 UTF-8 +# ar_QA ISO-8859-6 +# ar_QA.UTF-8 UTF-8 +# ar_SA ISO-8859-6 +# ar_SA.UTF-8 UTF-8 +# ar_SD ISO-8859-6 +# ar_SD.UTF-8 UTF-8 +# ar_SS UTF-8 +# ar_SY ISO-8859-6 +# ar_SY.UTF-8 UTF-8 +# ar_TN ISO-8859-6 +# ar_TN.UTF-8 UTF-8 +# ar_YE ISO-8859-6 +# ar_YE.UTF-8 UTF-8 +# as_IN UTF-8 +# ast_ES ISO-8859-15 +# ast_ES.UTF-8 UTF-8 +# ayc_PE UTF-8 +# az_AZ UTF-8 +# az_IR UTF-8 +# be_BY CP1251 +# be_BY.UTF-8 UTF-8 +# be_BY@latin UTF-8 +# bem_ZM UTF-8 +# ber_DZ UTF-8 +# ber_MA UTF-8 +# bg_BG CP1251 +# bg_BG.UTF-8 UTF-8 +# bhb_IN.UTF-8 UTF-8 +# bho_IN UTF-8 +# bho_NP UTF-8 +# bi_VU UTF-8 +# bn_BD UTF-8 +# bn_IN UTF-8 +# bo_CN UTF-8 +# bo_IN UTF-8 +# br_FR ISO-8859-1 +# br_FR.UTF-8 UTF-8 +# br_FR@euro ISO-8859-15 +# brx_IN UTF-8 +# bs_BA ISO-8859-2 +# bs_BA.UTF-8 UTF-8 +# byn_ER UTF-8 +# ca_AD ISO-8859-15 +# ca_AD.UTF-8 UTF-8 +# ca_ES ISO-8859-1 +# ca_ES.UTF-8 UTF-8 +# ca_ES@euro ISO-8859-15 +# ca_ES@valencia UTF-8 +# ca_FR ISO-8859-15 +# ca_FR.UTF-8 UTF-8 +# ca_IT ISO-8859-15 +# ca_IT.UTF-8 UTF-8 +# ce_RU UTF-8 +# chr_US UTF-8 +# ckb_IQ UTF-8 +# cmn_TW UTF-8 +# crh_UA UTF-8 +# cs_CZ ISO-8859-2 +# cs_CZ.UTF-8 UTF-8 +# csb_PL UTF-8 +# cv_RU UTF-8 +# cy_GB ISO-8859-14 +# cy_GB.UTF-8 UTF-8 +# da_DK ISO-8859-1 +# da_DK.UTF-8 UTF-8 +# de_AT ISO-8859-1 +# de_AT.UTF-8 UTF-8 +# de_AT@euro ISO-8859-15 +# de_BE ISO-8859-1 +# de_BE.UTF-8 UTF-8 +# de_BE@euro ISO-8859-15 +# de_CH ISO-8859-1 +# de_CH.UTF-8 UTF-8 +# de_DE ISO-8859-1 +# de_DE.UTF-8 UTF-8 +# de_DE@euro ISO-8859-15 +# de_IT ISO-8859-1 +# de_IT.UTF-8 UTF-8 +# de_LI.UTF-8 UTF-8 +# de_LU ISO-8859-1 +# de_LU.UTF-8 UTF-8 +# de_LU@euro ISO-8859-15 +# doi_IN UTF-8 +# dsb_DE UTF-8 +# dv_MV UTF-8 +# dz_BT UTF-8 +# el_CY ISO-8859-7 +# el_CY.UTF-8 UTF-8 +# el_GR ISO-8859-7 +# el_GR.UTF-8 UTF-8 +# el_GR@euro ISO-8859-7 +# en_AG UTF-8 +# en_AU ISO-8859-1 +# en_AU.UTF-8 UTF-8 +# en_BW ISO-8859-1 +# en_BW.UTF-8 UTF-8 +# en_CA ISO-8859-1 +# en_CA.UTF-8 UTF-8 +# en_DK ISO-8859-1 +# en_DK.ISO-8859-15 ISO-8859-15 +# en_DK.UTF-8 UTF-8 +# en_GB ISO-8859-1 +# en_GB.ISO-8859-15 ISO-8859-15 +# en_GB.UTF-8 UTF-8 +# en_HK ISO-8859-1 +# en_HK.UTF-8 UTF-8 +# en_IE ISO-8859-1 +# en_IE.UTF-8 UTF-8 +# en_IE@euro ISO-8859-15 +# en_IL UTF-8 +# en_IN UTF-8 +# en_NG UTF-8 +# en_NZ ISO-8859-1 +# en_NZ.UTF-8 UTF-8 +# en_PH ISO-8859-1 +# en_PH.UTF-8 UTF-8 +# en_SC.UTF-8 UTF-8 +# en_SG ISO-8859-1 +# en_SG.UTF-8 UTF-8 +# en_US ISO-8859-1 +# en_US.ISO-8859-15 ISO-8859-15 +en_US.UTF-8 UTF-8 +# en_ZA ISO-8859-1 +# en_ZA.UTF-8 UTF-8 +# en_ZM UTF-8 +# en_ZW ISO-8859-1 +# en_ZW.UTF-8 UTF-8 +# eo UTF-8 +# eo_US.UTF-8 UTF-8 +# es_AR ISO-8859-1 +# es_AR.UTF-8 UTF-8 +# es_BO ISO-8859-1 +# es_BO.UTF-8 UTF-8 +# es_CL ISO-8859-1 +# es_CL.UTF-8 UTF-8 +# es_CO ISO-8859-1 +# es_CO.UTF-8 UTF-8 +# es_CR ISO-8859-1 +# es_CR.UTF-8 UTF-8 +# es_CU UTF-8 +# es_DO ISO-8859-1 +# es_DO.UTF-8 UTF-8 +# es_EC ISO-8859-1 +# es_EC.UTF-8 UTF-8 +# es_ES ISO-8859-1 +# es_ES.UTF-8 UTF-8 +# es_ES@euro ISO-8859-15 +# es_GT ISO-8859-1 +# es_GT.UTF-8 UTF-8 +# es_HN ISO-8859-1 +# es_HN.UTF-8 UTF-8 +# es_MX ISO-8859-1 +# es_MX.UTF-8 UTF-8 +# es_NI ISO-8859-1 +# es_NI.UTF-8 UTF-8 +# es_PA ISO-8859-1 +# es_PA.UTF-8 UTF-8 +# es_PE ISO-8859-1 +# es_PE.UTF-8 UTF-8 +# es_PR ISO-8859-1 +# es_PR.UTF-8 UTF-8 +# es_PY ISO-8859-1 +# es_PY.UTF-8 UTF-8 +# es_SV ISO-8859-1 +# es_SV.UTF-8 UTF-8 +# es_US ISO-8859-1 +# es_US.UTF-8 UTF-8 +# es_UY ISO-8859-1 +# es_UY.UTF-8 UTF-8 +# es_VE ISO-8859-1 +# es_VE.UTF-8 UTF-8 +# et_EE ISO-8859-1 +# et_EE.ISO-8859-15 ISO-8859-15 +# et_EE.UTF-8 UTF-8 +# eu_ES ISO-8859-1 +# eu_ES.UTF-8 UTF-8 +# eu_ES@euro ISO-8859-15 +# eu_FR ISO-8859-1 +# eu_FR.UTF-8 UTF-8 +# eu_FR@euro ISO-8859-15 +# fa_IR UTF-8 +# ff_SN UTF-8 +# fi_FI ISO-8859-1 +# fi_FI.UTF-8 UTF-8 +# fi_FI@euro ISO-8859-15 +# fil_PH UTF-8 +# fo_FO ISO-8859-1 +# fo_FO.UTF-8 UTF-8 +# fr_BE ISO-8859-1 +# fr_BE.UTF-8 UTF-8 +# fr_BE@euro ISO-8859-15 +# fr_CA ISO-8859-1 +# fr_CA.UTF-8 UTF-8 +# fr_CH ISO-8859-1 +# fr_CH.UTF-8 UTF-8 +# fr_FR ISO-8859-1 +# fr_FR.UTF-8 UTF-8 +# fr_FR@euro ISO-8859-15 +# fr_LU ISO-8859-1 +# fr_LU.UTF-8 UTF-8 +# fr_LU@euro ISO-8859-15 +# fur_IT UTF-8 +# fy_DE UTF-8 +# fy_NL UTF-8 +# ga_IE ISO-8859-1 +# ga_IE.UTF-8 UTF-8 +# ga_IE@euro ISO-8859-15 +# gd_GB ISO-8859-15 +# gd_GB.UTF-8 UTF-8 +# gez_ER UTF-8 +# gez_ER@abegede UTF-8 +# gez_ET UTF-8 +# gez_ET@abegede UTF-8 +# gl_ES ISO-8859-1 +# gl_ES.UTF-8 UTF-8 +# gl_ES@euro ISO-8859-15 +# gu_IN UTF-8 +# gv_GB ISO-8859-1 +# gv_GB.UTF-8 UTF-8 +# ha_NG UTF-8 +# hak_TW UTF-8 +# he_IL ISO-8859-8 +# he_IL.UTF-8 UTF-8 +# hi_IN UTF-8 +# hif_FJ UTF-8 +# hne_IN UTF-8 +# hr_HR ISO-8859-2 +# hr_HR.UTF-8 UTF-8 +# hsb_DE ISO-8859-2 +# hsb_DE.UTF-8 UTF-8 +# ht_HT UTF-8 +# hu_HU ISO-8859-2 +# hu_HU.UTF-8 UTF-8 +# hy_AM UTF-8 +# hy_AM.ARMSCII-8 ARMSCII-8 +# ia_FR UTF-8 +# id_ID ISO-8859-1 +# id_ID.UTF-8 UTF-8 +# ig_NG UTF-8 +# ik_CA UTF-8 +# is_IS ISO-8859-1 +# is_IS.UTF-8 UTF-8 +# it_CH ISO-8859-1 +# it_CH.UTF-8 UTF-8 +# it_IT ISO-8859-1 +# it_IT.UTF-8 UTF-8 +# it_IT@euro ISO-8859-15 +# iu_CA UTF-8 +# ja_JP.EUC-JP EUC-JP +# ja_JP.UTF-8 UTF-8 +# ka_GE GEORGIAN-PS +# ka_GE.UTF-8 UTF-8 +# kab_DZ UTF-8 +# kk_KZ PT154 +# kk_KZ.RK1048 RK1048 +# kk_KZ.UTF-8 UTF-8 +# kl_GL ISO-8859-1 +# kl_GL.UTF-8 UTF-8 +# km_KH UTF-8 +# kn_IN UTF-8 +# ko_KR.EUC-KR EUC-KR +# ko_KR.UTF-8 UTF-8 +# kok_IN UTF-8 +# ks_IN UTF-8 +# ks_IN@devanagari UTF-8 +# ku_TR ISO-8859-9 +# ku_TR.UTF-8 UTF-8 +# kw_GB ISO-8859-1 +# kw_GB.UTF-8 UTF-8 +# ky_KG UTF-8 +# lb_LU UTF-8 +# lg_UG ISO-8859-10 +# lg_UG.UTF-8 UTF-8 +# li_BE UTF-8 +# li_NL UTF-8 +# lij_IT UTF-8 +# ln_CD UTF-8 +# lo_LA UTF-8 +# lt_LT ISO-8859-13 +# lt_LT.UTF-8 UTF-8 +# lv_LV ISO-8859-13 +# lv_LV.UTF-8 UTF-8 +# lzh_TW UTF-8 +# mag_IN UTF-8 +# mai_IN UTF-8 +# mai_NP UTF-8 +# mfe_MU UTF-8 +# mg_MG ISO-8859-15 +# mg_MG.UTF-8 UTF-8 +# mhr_RU UTF-8 +# mi_NZ ISO-8859-13 +# mi_NZ.UTF-8 UTF-8 +# miq_NI UTF-8 +# mjw_IN UTF-8 +# mk_MK ISO-8859-5 +# mk_MK.UTF-8 UTF-8 +# ml_IN UTF-8 +# mn_MN UTF-8 +# mni_IN UTF-8 +# mr_IN UTF-8 +# ms_MY ISO-8859-1 +# ms_MY.UTF-8 UTF-8 +# mt_MT ISO-8859-3 +# mt_MT.UTF-8 UTF-8 +# my_MM UTF-8 +# nan_TW UTF-8 +# nan_TW@latin UTF-8 +# nb_NO ISO-8859-1 +# nb_NO.UTF-8 UTF-8 +# nds_DE UTF-8 +# nds_NL UTF-8 +# ne_NP UTF-8 +# nhn_MX UTF-8 +# niu_NU UTF-8 +# niu_NZ UTF-8 +# nl_AW UTF-8 +# nl_BE ISO-8859-1 +# nl_BE.UTF-8 UTF-8 +# nl_BE@euro ISO-8859-15 +# nl_NL ISO-8859-1 +# nl_NL.UTF-8 UTF-8 +# nl_NL@euro ISO-8859-15 +# nn_NO ISO-8859-1 +# nn_NO.UTF-8 UTF-8 +# nr_ZA UTF-8 +# nso_ZA UTF-8 +# oc_FR ISO-8859-1 +# oc_FR.UTF-8 UTF-8 +# om_ET UTF-8 +# om_KE ISO-8859-1 +# om_KE.UTF-8 UTF-8 +# or_IN UTF-8 +# os_RU UTF-8 +# pa_IN UTF-8 +# pa_PK UTF-8 +# pap_AW UTF-8 +# pap_CW UTF-8 +# pl_PL ISO-8859-2 +# pl_PL.UTF-8 UTF-8 +# ps_AF UTF-8 +# pt_BR ISO-8859-1 +# pt_BR.UTF-8 UTF-8 +# pt_PT ISO-8859-1 +# pt_PT.UTF-8 UTF-8 +# pt_PT@euro ISO-8859-15 +# quz_PE UTF-8 +# raj_IN UTF-8 +# ro_RO ISO-8859-2 +# ro_RO.UTF-8 UTF-8 +# ru_RU ISO-8859-5 +# ru_RU.CP1251 CP1251 +# ru_RU.KOI8-R KOI8-R +# ru_RU.UTF-8 UTF-8 +# ru_UA KOI8-U +# ru_UA.UTF-8 UTF-8 +# rw_RW UTF-8 +# sa_IN UTF-8 +# sah_RU UTF-8 +# sat_IN UTF-8 +# sc_IT UTF-8 +# sd_IN UTF-8 +# sd_IN@devanagari UTF-8 +# sd_PK UTF-8 +# se_NO UTF-8 +# sgs_LT UTF-8 +# shn_MM UTF-8 +# shs_CA UTF-8 +# si_LK UTF-8 +# sid_ET UTF-8 +# sk_SK ISO-8859-2 +# sk_SK.UTF-8 UTF-8 +# sl_SI ISO-8859-2 +# sl_SI.UTF-8 UTF-8 +# sm_WS UTF-8 +# so_DJ ISO-8859-1 +# so_DJ.UTF-8 UTF-8 +# so_ET UTF-8 +# so_KE ISO-8859-1 +# so_KE.UTF-8 UTF-8 +# so_SO ISO-8859-1 +# so_SO.UTF-8 UTF-8 +# sq_AL ISO-8859-1 +# sq_AL.UTF-8 UTF-8 +# sq_MK UTF-8 +# sr_ME UTF-8 +# sr_RS UTF-8 +# sr_RS@latin UTF-8 +# ss_ZA UTF-8 +# st_ZA ISO-8859-1 +# st_ZA.UTF-8 UTF-8 +# sv_FI ISO-8859-1 +# sv_FI.UTF-8 UTF-8 +# sv_FI@euro ISO-8859-15 +# sv_SE ISO-8859-1 +# sv_SE.ISO-8859-15 ISO-8859-15 +# sv_SE.UTF-8 UTF-8 +# sw_KE UTF-8 +# sw_TZ UTF-8 +# szl_PL UTF-8 +# ta_IN UTF-8 +# ta_LK UTF-8 +# tcy_IN.UTF-8 UTF-8 +# te_IN UTF-8 +# tg_TJ KOI8-T +# tg_TJ.UTF-8 UTF-8 +# th_TH TIS-620 +# th_TH.UTF-8 UTF-8 +# the_NP UTF-8 +# ti_ER UTF-8 +# ti_ET UTF-8 +# tig_ER UTF-8 +# tk_TM UTF-8 +# tl_PH ISO-8859-1 +# tl_PH.UTF-8 UTF-8 +# tn_ZA UTF-8 +# to_TO UTF-8 +# tpi_PG UTF-8 +# tr_CY ISO-8859-9 +# tr_CY.UTF-8 UTF-8 +# tr_TR ISO-8859-9 +# tr_TR.UTF-8 UTF-8 +# ts_ZA UTF-8 +# tt_RU UTF-8 +# tt_RU@iqtelif UTF-8 +# ug_CN UTF-8 +# ug_CN@latin UTF-8 +# uk_UA KOI8-U +# uk_UA.UTF-8 UTF-8 +# unm_US UTF-8 +# ur_IN UTF-8 +# ur_PK UTF-8 +# uz_UZ ISO-8859-1 +# uz_UZ.UTF-8 UTF-8 +# uz_UZ@cyrillic UTF-8 +# ve_ZA UTF-8 +# vi_VN UTF-8 +# wa_BE ISO-8859-1 +# wa_BE.UTF-8 UTF-8 +# wa_BE@euro ISO-8859-15 +# wae_CH UTF-8 +# wal_ET UTF-8 +# wo_SN UTF-8 +# xh_ZA ISO-8859-1 +# xh_ZA.UTF-8 UTF-8 +# yi_US CP1255 +# yi_US.UTF-8 UTF-8 +# yo_NG UTF-8 +# yue_HK UTF-8 +# yuw_PG UTF-8 +# zh_CN GB2312 +# zh_CN.GB18030 GB18030 +# zh_CN.GBK GBK +# zh_CN.UTF-8 UTF-8 +# zh_HK BIG5-HKSCS +# zh_HK.UTF-8 UTF-8 +# zh_SG GB2312 +# zh_SG.GBK GBK +# zh_SG.UTF-8 UTF-8 +# zh_TW BIG5 +# zh_TW.EUC-TW EUC-TW +# zh_TW.UTF-8 UTF-8 +# zu_ZA ISO-8859-1 +# zu_ZA.UTF-8 UTF-8 diff --git a/localtime b/localtime new file mode 120000 index 0000000..622b45b --- /dev/null +++ b/localtime @@ -0,0 +1 @@ +/usr/share/zoneinfo/Europe/Berlin \ No newline at end of file diff --git a/logcheck/ignore.d.paranoid/mysql-server-5_7 b/logcheck/ignore.d.paranoid/mysql-server-5_7 new file mode 100644 index 0000000..00cc5c3 --- /dev/null +++ b/logcheck/ignore.d.paranoid/mysql-server-5_7 @@ -0,0 +1,9 @@ +/etc/init.d/mysql\[[0-9]+\]: Check that mysqld is running and that the socket: '/var/run/mysqld/mysqld.sock' exists\!$ +/etc/init.d/mysql\[[0-9]+\]: '/usr/bin/mysqladmin --defaults-(extra-)?file=/etc/mysql/debian.cnf ping' resulted in$ +/etc/mysql/debian-start\[[0-9]+\]: Checking for crashed MySQL tables\.$ +mysqld\[[0-9]+\]: $ +mysqld\[[0-9]+\]: Version: .* socket: '/var/run/mysqld/mysqld.sock' port: 3306$ +mysqld\[[0-9]+\]: Warning: Ignoring user change to 'mysql' because the user was set to 'mysql' earlier on the command line$ +mysqld_safe\[[0-9]+\]: started$ +usermod\[[0-9]+\]: change user `mysql' GID from `([0-9]+)' to `\1'$ +usermod\[[0-9]+\]: change user `mysql' shell from `/bin/false' to `/bin/false'$ diff --git a/logcheck/ignore.d.server/gpg-agent b/logcheck/ignore.d.server/gpg-agent new file mode 100644 index 0000000..a2f2130 --- /dev/null +++ b/logcheck/ignore.d.server/gpg-agent @@ -0,0 +1,11 @@ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Listening on GnuPG cryptographic agent and passphrase cache\.$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Listening on GnuPG network certificate management daemon\.$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Listening on GnuPG cryptographic agent and passphrase cache \(restricted\)\.$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Listening on GnuPG cryptographic agent \(access for web browsers\)\.$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Listening on GnuPG cryptographic agent \(ssh-agent emulation\)\.$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Closed GnuPG network certificate management daemon\.$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Closed GnuPG cryptographic agent and passphrase cache\.$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Closed GnuPG cryptographic agent and passphrase cache \(restricted\)\.$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Closed GnuPG cryptographic agent \(ssh-agent emulation\)\.$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Closed GnuPG cryptographic agent \(access for web browsers\)\.$ + diff --git a/logcheck/ignore.d.server/libsasl2-modules b/logcheck/ignore.d.server/libsasl2-modules new file mode 100644 index 0000000..0cf93aa --- /dev/null +++ b/logcheck/ignore.d.server/libsasl2-modules @@ -0,0 +1 @@ +\w{3} [ :0-9]{11} [._[:alnum:]-]+ [._[:alnum:]-]+: DIGEST-MD5 common mech free diff --git a/logcheck/ignore.d.server/mysql-server-5_7 b/logcheck/ignore.d.server/mysql-server-5_7 new file mode 100644 index 0000000..37f25cb --- /dev/null +++ b/logcheck/ignore.d.server/mysql-server-5_7 @@ -0,0 +1,32 @@ +/etc/init.d/mysql\[[0-9]+\]: [0-9]+ processes alive and '/usr/bin/mysqladmin --defaults-(extra-)?file=/etc/mysql/debian.cnf ping' resulted in$ +/etc/init.d/mysql\[[0-9]+\]: Check that mysqld is running and that the socket: '/var/run/mysqld/mysqld.sock' exists\!$ +/etc/init.d/mysql\[[0-9]+\]: '/usr/bin/mysqladmin --defaults-(extra-)?file=/etc/mysql/debian.cnf ping' resulted in$ +/etc/mysql/debian-start\[[0-9]+\]: Checking for crashed MySQL tables\.$ +mysqld\[[0-9]+\]: ?$ +mysqld\[[0-9]+\]: .*InnoDB: Shutdown completed +mysqld\[[0-9]+\]: .*InnoDB: Started; +mysqld\[[0-9]+\]: .*InnoDB: Starting shutdown\.\.\.$ +mysqld\[[0-9]+\]: .*\[Note\] /usr/sbin/mysqld: Normal shutdown$ +mysqld\[[0-9]+\]: .*\[Note\] /usr/sbin/mysqld: ready for connections\.$ +mysqld\[[0-9]+\]: .*\[Note\] /usr/sbin/mysqld: Shutdown complete$ +mysqld\[[0-9]+\]: /usr/sbin/mysqld: ready for connections\.$ +mysqld\[[0-9]+\]: .*/usr/sbin/mysqld: Shutdown Complete$ +mysqld\[[0-9]+\]: Version: .* socket +mysqld\[[0-9]+\]: Warning: Ignoring user change to 'mysql' because the user was set to 'mysql' earlier on the command line$ +mysqld_safe\[[0-9]+\]: ?$ +mysqld_safe\[[0-9]+\]: able to use the new GRANT command!$ +mysqld_safe\[[0-9]+\]: ended$ +mysqld_safe\[[0-9]+\]: http://www.mysql.com$ +mysqld_safe\[[0-9]+\]: NOTE: If you are upgrading from a MySQL <= 3.22.10 you should run$ +mysqld_safe\[[0-9]+\]: PLEASE REMEMBER TO SET A PASSWORD FOR THE MySQL root USER !$ +mysqld_safe\[[0-9]+\]: Please report any problems with the /usr/bin/mysqlbug script!$ +mysqld_safe\[[0-9]+\]: See the manual for more instructions.$ +mysqld_safe\[[0-9]+\]: started$ +mysqld_safe\[[0-9]+\]: Support MySQL by buying support/licenses at https://order.mysql.com$ +mysqld_safe\[[0-9]+\]: The latest information about MySQL is available on the web at$ +mysqld_safe\[[0-9]+\]: the /usr/bin/mysql_fix_privilege_tables. Otherwise you will not be$ +mysqld_safe\[[0-9]+\]: To do so, start the server, then issue the following commands:$ +mysqld_safe\[[0-9]+\]: /usr/bin/mysqladmin -u root -h app109 password 'new-password'$ +mysqld_safe\[[0-9]+\]: /usr/bin/mysqladmin -u root password 'new-password'$ +usermod\[[0-9]+\]: change user `mysql' GID from `([0-9]+)' to `\1'$ +usermod\[[0-9]+\]: change user `mysql' shell from `/bin/false' to `/bin/false'$ diff --git a/logcheck/ignore.d.server/rsyslog b/logcheck/ignore.d.server/rsyslog new file mode 100644 index 0000000..e5f9b3b --- /dev/null +++ b/logcheck/ignore.d.server/rsyslog @@ -0,0 +1,6 @@ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: imklog [0-9.]+, log source = /proc/kmsg started.$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: Kernel logging \(proc\) stopped.$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyslogd: \[origin software="rsyslogd" swVersion="[0-9.]+" x-pid="[0-9]+" x-info="http://www.rsyslog.com"\] start$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyslogd: \[origin software="rsyslogd" swVersion="[0-9.]+" x-pid="[0-9]+" x-info="http://www.rsyslog.com"\] exiting on signal [0-9]+.$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyslogd: \[origin software="rsyslogd" swVersion="[0-9.]+" x-pid="[0-9]+" x-info="http://www.rsyslog.com"\] rsyslogd was HUPed$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ systemd-tmpfiles\[[0-9]+\]: \[/usr/lib/tmpfiles.d/var.conf:[0-9]+\] Duplicate line for path "/var/log", ignoring\.$ diff --git a/logcheck/ignore.d.workstation/mysql-server-5_7 b/logcheck/ignore.d.workstation/mysql-server-5_7 new file mode 100644 index 0000000..37f25cb --- /dev/null +++ b/logcheck/ignore.d.workstation/mysql-server-5_7 @@ -0,0 +1,32 @@ +/etc/init.d/mysql\[[0-9]+\]: [0-9]+ processes alive and '/usr/bin/mysqladmin --defaults-(extra-)?file=/etc/mysql/debian.cnf ping' resulted in$ +/etc/init.d/mysql\[[0-9]+\]: Check that mysqld is running and that the socket: '/var/run/mysqld/mysqld.sock' exists\!$ +/etc/init.d/mysql\[[0-9]+\]: '/usr/bin/mysqladmin --defaults-(extra-)?file=/etc/mysql/debian.cnf ping' resulted in$ +/etc/mysql/debian-start\[[0-9]+\]: Checking for crashed MySQL tables\.$ +mysqld\[[0-9]+\]: ?$ +mysqld\[[0-9]+\]: .*InnoDB: Shutdown completed +mysqld\[[0-9]+\]: .*InnoDB: Started; +mysqld\[[0-9]+\]: .*InnoDB: Starting shutdown\.\.\.$ +mysqld\[[0-9]+\]: .*\[Note\] /usr/sbin/mysqld: Normal shutdown$ +mysqld\[[0-9]+\]: .*\[Note\] /usr/sbin/mysqld: ready for connections\.$ +mysqld\[[0-9]+\]: .*\[Note\] /usr/sbin/mysqld: Shutdown complete$ +mysqld\[[0-9]+\]: /usr/sbin/mysqld: ready for connections\.$ +mysqld\[[0-9]+\]: .*/usr/sbin/mysqld: Shutdown Complete$ +mysqld\[[0-9]+\]: Version: .* socket +mysqld\[[0-9]+\]: Warning: Ignoring user change to 'mysql' because the user was set to 'mysql' earlier on the command line$ +mysqld_safe\[[0-9]+\]: ?$ +mysqld_safe\[[0-9]+\]: able to use the new GRANT command!$ +mysqld_safe\[[0-9]+\]: ended$ +mysqld_safe\[[0-9]+\]: http://www.mysql.com$ +mysqld_safe\[[0-9]+\]: NOTE: If you are upgrading from a MySQL <= 3.22.10 you should run$ +mysqld_safe\[[0-9]+\]: PLEASE REMEMBER TO SET A PASSWORD FOR THE MySQL root USER !$ +mysqld_safe\[[0-9]+\]: Please report any problems with the /usr/bin/mysqlbug script!$ +mysqld_safe\[[0-9]+\]: See the manual for more instructions.$ +mysqld_safe\[[0-9]+\]: started$ +mysqld_safe\[[0-9]+\]: Support MySQL by buying support/licenses at https://order.mysql.com$ +mysqld_safe\[[0-9]+\]: The latest information about MySQL is available on the web at$ +mysqld_safe\[[0-9]+\]: the /usr/bin/mysql_fix_privilege_tables. Otherwise you will not be$ +mysqld_safe\[[0-9]+\]: To do so, start the server, then issue the following commands:$ +mysqld_safe\[[0-9]+\]: /usr/bin/mysqladmin -u root -h app109 password 'new-password'$ +mysqld_safe\[[0-9]+\]: /usr/bin/mysqladmin -u root password 'new-password'$ +usermod\[[0-9]+\]: change user `mysql' GID from `([0-9]+)' to `\1'$ +usermod\[[0-9]+\]: change user `mysql' shell from `/bin/false' to `/bin/false'$ diff --git a/login.defs b/login.defs new file mode 100644 index 0000000..7c32d63 --- /dev/null +++ b/login.defs @@ -0,0 +1,341 @@ +# +# /etc/login.defs - Configuration control definitions for the login package. +# +# Three items must be defined: MAIL_DIR, ENV_SUPATH, and ENV_PATH. +# If unspecified, some arbitrary (and possibly incorrect) value will +# be assumed. All other items are optional - if not specified then +# the described action or option will be inhibited. +# +# Comment lines (lines beginning with "#") and blank lines are ignored. +# +# Modified for Linux. --marekm + +# REQUIRED for useradd/userdel/usermod +# Directory where mailboxes reside, _or_ name of file, relative to the +# home directory. If you _do_ define MAIL_DIR and MAIL_FILE, +# MAIL_DIR takes precedence. +# +# Essentially: +# - MAIL_DIR defines the location of users mail spool files +# (for mbox use) by appending the username to MAIL_DIR as defined +# below. +# - MAIL_FILE defines the location of the users mail spool files as the +# fully-qualified filename obtained by prepending the user home +# directory before $MAIL_FILE +# +# NOTE: This is no more used for setting up users MAIL environment variable +# which is, starting from shadow 4.0.12-1 in Debian, entirely the +# job of the pam_mail PAM modules +# See default PAM configuration files provided for +# login, su, etc. +# +# This is a temporary situation: setting these variables will soon +# move to /etc/default/useradd and the variables will then be +# no more supported +MAIL_DIR /var/mail +#MAIL_FILE .mail + +# +# Enable logging and display of /var/log/faillog login failure info. +# This option conflicts with the pam_tally PAM module. +# +FAILLOG_ENAB yes + +# +# Enable display of unknown usernames when login failures are recorded. +# +# WARNING: Unknown usernames may become world readable. +# See #290803 and #298773 for details about how this could become a security +# concern +LOG_UNKFAIL_ENAB no + +# +# Enable logging of successful logins +# +LOG_OK_LOGINS no + +# +# Enable "syslog" logging of su activity - in addition to sulog file logging. +# SYSLOG_SG_ENAB does the same for newgrp and sg. +# +SYSLOG_SU_ENAB yes +SYSLOG_SG_ENAB yes + +# +# If defined, all su activity is logged to this file. +# +#SULOG_FILE /var/log/sulog + +# +# If defined, file which maps tty line to TERM environment parameter. +# Each line of the file is in a format something like "vt100 tty01". +# +#TTYTYPE_FILE /etc/ttytype + +# +# If defined, login failures will be logged here in a utmp format +# last, when invoked as lastb, will read /var/log/btmp, so... +# +FTMP_FILE /var/log/btmp + +# +# If defined, the command name to display when running "su -". For +# example, if this is defined as "su" then a "ps" will display the +# command is "-su". If not defined, then "ps" would display the +# name of the shell actually being run, e.g. something like "-sh". +# +SU_NAME su + +# +# If defined, file which inhibits all the usual chatter during the login +# sequence. If a full pathname, then hushed mode will be enabled if the +# user's name or shell are found in the file. If not a full pathname, then +# hushed mode will be enabled if the file exists in the user's home directory. +# +HUSHLOGIN_FILE .hushlogin +#HUSHLOGIN_FILE /etc/hushlogins + +# +# *REQUIRED* The default PATH settings, for superuser and normal users. +# +# (they are minimal, add the rest in the shell startup files) +ENV_SUPATH PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin +ENV_PATH PATH=/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games + +# +# Terminal permissions +# +# TTYGROUP Login tty will be assigned this group ownership. +# TTYPERM Login tty will be set to this permission. +# +# If you have a "write" program which is "setgid" to a special group +# which owns the terminals, define TTYGROUP to the group number and +# TTYPERM to 0620. Otherwise leave TTYGROUP commented out and assign +# TTYPERM to either 622 or 600. +# +# In Debian /usr/bin/bsd-write or similar programs are setgid tty +# However, the default and recommended value for TTYPERM is still 0600 +# to not allow anyone to write to anyone else console or terminal + +# Users can still allow other people to write them by issuing +# the "mesg y" command. + +TTYGROUP tty +TTYPERM 0600 + +# +# Login configuration initializations: +# +# ERASECHAR Terminal ERASE character ('\010' = backspace). +# KILLCHAR Terminal KILL character ('\025' = CTRL/U). +# UMASK Default "umask" value. +# +# The ERASECHAR and KILLCHAR are used only on System V machines. +# +# UMASK is the default umask value for pam_umask and is used by +# useradd and newusers to set the mode of the new home directories. +# 022 is the "historical" value in Debian for UMASK +# 027, or even 077, could be considered better for privacy +# There is no One True Answer here : each sysadmin must make up his/her +# mind. +# +# If USERGROUPS_ENAB is set to "yes", that will modify this UMASK default value +# for private user groups, i. e. the uid is the same as gid, and username is +# the same as the primary group name: for these, the user permissions will be +# used as group permissions, e. g. 022 will become 002. +# +# Prefix these values with "0" to get octal, "0x" to get hexadecimal. +# +ERASECHAR 0177 +KILLCHAR 025 +UMASK 022 + +# +# Password aging controls: +# +# PASS_MAX_DAYS Maximum number of days a password may be used. +# PASS_MIN_DAYS Minimum number of days allowed between password changes. +# PASS_WARN_AGE Number of days warning given before a password expires. +# +PASS_MAX_DAYS 99999 +PASS_MIN_DAYS 0 +PASS_WARN_AGE 7 + +# +# Min/max values for automatic uid selection in useradd +# +UID_MIN 1000 +UID_MAX 60000 +# System accounts +#SYS_UID_MIN 100 +#SYS_UID_MAX 999 + +# +# Min/max values for automatic gid selection in groupadd +# +GID_MIN 1000 +GID_MAX 60000 +# System accounts +#SYS_GID_MIN 100 +#SYS_GID_MAX 999 + +# +# Max number of login retries if password is bad. This will most likely be +# overriden by PAM, since the default pam_unix module has it's own built +# in of 3 retries. However, this is a safe fallback in case you are using +# an authentication module that does not enforce PAM_MAXTRIES. +# +LOGIN_RETRIES 5 + +# +# Max time in seconds for login +# +LOGIN_TIMEOUT 60 + +# +# Which fields may be changed by regular users using chfn - use +# any combination of letters "frwh" (full name, room number, work +# phone, home phone). If not defined, no changes are allowed. +# For backward compatibility, "yes" = "rwh" and "no" = "frwh". +# +CHFN_RESTRICT rwh + +# +# Should login be allowed if we can't cd to the home directory? +# Default in no. +# +DEFAULT_HOME yes + +# +# If defined, this command is run when removing a user. +# It should remove any at/cron/print jobs etc. owned by +# the user to be removed (passed as the first argument). +# +#USERDEL_CMD /usr/sbin/userdel_local + +# +# Enable setting of the umask group bits to be the same as owner bits +# (examples: 022 -> 002, 077 -> 007) for non-root users, if the uid is +# the same as gid, and username is the same as the primary group name. +# +# If set to yes, userdel will remove the user's group if it contains no +# more members, and useradd will create by default a group with the name +# of the user. +# +USERGROUPS_ENAB yes + +# +# Instead of the real user shell, the program specified by this parameter +# will be launched, although its visible name (argv[0]) will be the shell's. +# The program may do whatever it wants (logging, additional authentification, +# banner, ...) before running the actual shell. +# +# FAKE_SHELL /bin/fakeshell + +# +# If defined, either full pathname of a file containing device names or +# a ":" delimited list of device names. Root logins will be allowed only +# upon these devices. +# +# This variable is used by login and su. +# +#CONSOLE /etc/consoles +#CONSOLE console:tty01:tty02:tty03:tty04 + +# +# List of groups to add to the user's supplementary group set +# when logging in on the console (as determined by the CONSOLE +# setting). Default is none. +# +# Use with caution - it is possible for users to gain permanent +# access to these groups, even when not logged in on the console. +# How to do it is left as an exercise for the reader... +# +# This variable is used by login and su. +# +#CONSOLE_GROUPS floppy:audio:cdrom + +# +# If set to "yes", new passwords will be encrypted using the MD5-based +# algorithm compatible with the one used by recent releases of FreeBSD. +# It supports passwords of unlimited length and longer salt strings. +# Set to "no" if you need to copy encrypted passwords to other systems +# which don't understand the new algorithm. Default is "no". +# +# This variable is deprecated. You should use ENCRYPT_METHOD. +# +#MD5_CRYPT_ENAB no + +# +# If set to MD5 , MD5-based algorithm will be used for encrypting password +# If set to SHA256, SHA256-based algorithm will be used for encrypting password +# If set to SHA512, SHA512-based algorithm will be used for encrypting password +# If set to DES, DES-based algorithm will be used for encrypting password (default) +# Overrides the MD5_CRYPT_ENAB option +# +# Note: It is recommended to use a value consistent with +# the PAM modules configuration. +# +ENCRYPT_METHOD SHA512 + +# +# Only used if ENCRYPT_METHOD is set to SHA256 or SHA512. +# +# Define the number of SHA rounds. +# With a lot of rounds, it is more difficult to brute forcing the password. +# But note also that it more CPU resources will be needed to authenticate +# users. +# +# If not specified, the libc will choose the default number of rounds (5000). +# The values must be inside the 1000-999999999 range. +# If only one of the MIN or MAX values is set, then this value will be used. +# If MIN > MAX, the highest value will be used. +# +# SHA_CRYPT_MIN_ROUNDS 5000 +# SHA_CRYPT_MAX_ROUNDS 5000 + +################# OBSOLETED BY PAM ############## +# # +# These options are now handled by PAM. Please # +# edit the appropriate file in /etc/pam.d/ to # +# enable the equivelants of them. +# +############### + +#MOTD_FILE +#DIALUPS_CHECK_ENAB +#LASTLOG_ENAB +#MAIL_CHECK_ENAB +#OBSCURE_CHECKS_ENAB +#PORTTIME_CHECKS_ENAB +#SU_WHEEL_ONLY +#CRACKLIB_DICTPATH +#PASS_CHANGE_TRIES +#PASS_ALWAYS_WARN +#ENVIRON_FILE +#NOLOGINS_FILE +#ISSUE_FILE +#PASS_MIN_LEN +#PASS_MAX_LEN +#ULIMIT +#ENV_HZ +#CHFN_AUTH +#CHSH_AUTH +#FAIL_DELAY + +################# OBSOLETED ####################### +# # +# These options are no more handled by shadow. # +# # +# Shadow utilities will display a warning if they # +# still appear. # +# # +################################################### + +# CLOSE_SESSIONS +# LOGIN_STRING +# NO_PASSWORD_CONSOLE +# QMAIL_DIR + + + diff --git a/logrotate.conf b/logrotate.conf new file mode 100644 index 0000000..1a556c9 --- /dev/null +++ b/logrotate.conf @@ -0,0 +1,24 @@ +# see "man logrotate" for details +# rotate log files weekly +weekly + +# use the syslog group by default, since this is the owning group +# of /var/log/syslog. +su root syslog + +# keep 4 weeks worth of backlogs +rotate 4 + +# create new (empty) log files after rotating old ones +create + +# use date as a suffix of the rotated file +#dateext + +# uncomment this if you want your log files compressed +#compress + +# packages drop log rotation information into this directory +include /etc/logrotate.d + +# system-specific logs may be also be configured here. diff --git a/logrotate.d/alternatives b/logrotate.d/alternatives new file mode 100644 index 0000000..41c8a9c --- /dev/null +++ b/logrotate.d/alternatives @@ -0,0 +1,9 @@ +/var/log/alternatives.log { + monthly + rotate 12 + compress + delaycompress + missingok + notifempty + create 644 root root +} diff --git a/logrotate.d/apache2 b/logrotate.d/apache2 new file mode 100644 index 0000000..37c5f22 --- /dev/null +++ b/logrotate.d/apache2 @@ -0,0 +1,20 @@ +/var/log/apache2/*.log { + daily + missingok + rotate 14 + compress + delaycompress + notifempty + create 640 root adm + sharedscripts + postrotate + if invoke-rc.d apache2 status > /dev/null 2>&1; then \ + invoke-rc.d apache2 reload > /dev/null 2>&1; \ + fi; + endscript + prerotate + if [ -d /etc/logrotate.d/httpd-prerotate ]; then \ + run-parts /etc/logrotate.d/httpd-prerotate; \ + fi; \ + endscript +} diff --git a/logrotate.d/apt b/logrotate.d/apt new file mode 100644 index 0000000..9a6e5d1 --- /dev/null +++ b/logrotate.d/apt @@ -0,0 +1,16 @@ +/var/log/apt/term.log { + rotate 12 + monthly + compress + missingok + notifempty +} + +/var/log/apt/history.log { + rotate 12 + monthly + compress + missingok + notifempty +} + diff --git a/logrotate.d/btmp b/logrotate.d/btmp new file mode 100644 index 0000000..0aa1ae1 --- /dev/null +++ b/logrotate.d/btmp @@ -0,0 +1,7 @@ +# no packages own btmp -- we'll rotate it here +/var/log/btmp { + missingok + monthly + create 0660 root utmp + rotate 1 +} diff --git a/logrotate.d/dbconfig-common b/logrotate.d/dbconfig-common new file mode 100644 index 0000000..eb0ec8d --- /dev/null +++ b/logrotate.d/dbconfig-common @@ -0,0 +1,7 @@ +/var/log/dbconfig-common/dbc.log { + monthly + rotate 12 + missingok + notifempty + create 600 root root +} diff --git a/logrotate.d/dpkg b/logrotate.d/dpkg new file mode 100644 index 0000000..cf36f08 --- /dev/null +++ b/logrotate.d/dpkg @@ -0,0 +1,9 @@ +/var/log/dpkg.log { + monthly + rotate 12 + compress + delaycompress + missingok + notifempty + create 644 root root +} diff --git a/logrotate.d/mysql-server b/logrotate.d/mysql-server new file mode 100644 index 0000000..2d9c71a --- /dev/null +++ b/logrotate.d/mysql-server @@ -0,0 +1,27 @@ +# - I put everything in one block and added sharedscripts, so that mysql gets +# flush-logs'd only once. +# Else the binary logs would automatically increase by n times every day. +# - The error log is obsolete, messages go to syslog now. +/var/log/mysql.log /var/log/mysql/*log { + daily + rotate 7 + missingok + create 640 mysql adm + compress + sharedscripts + postrotate + test -x /usr/bin/mysqladmin || exit 0 + # If this fails, check debian.conf! + MYADMIN="/usr/bin/mysqladmin --defaults-file=/etc/mysql/debian.cnf" + if [ -z "`$MYADMIN ping 2>/dev/null`" ]; then + # Really no mysqld or rather a missing debian-sys-maint user? + # If this occurs and is not a error please report a bug. + #if ps cax | grep -q mysqld; then + if killall -q -s0 -umysql mysqld; then + exit 1 + fi + else + $MYADMIN flush-logs + fi + endscript +} diff --git a/logrotate.d/rsyslog b/logrotate.d/rsyslog new file mode 100644 index 0000000..a69d4e5 --- /dev/null +++ b/logrotate.d/rsyslog @@ -0,0 +1,37 @@ +/var/log/syslog +{ + rotate 7 + daily + missingok + notifempty + delaycompress + compress + postrotate + /usr/lib/rsyslog/rsyslog-rotate + endscript +} + +/var/log/mail.info +/var/log/mail.warn +/var/log/mail.err +/var/log/mail.log +/var/log/daemon.log +/var/log/kern.log +/var/log/auth.log +/var/log/user.log +/var/log/lpr.log +/var/log/cron.log +/var/log/debug +/var/log/messages +{ + rotate 4 + weekly + missingok + notifempty + compress + delaycompress + sharedscripts + postrotate + /usr/lib/rsyslog/rsyslog-rotate + endscript +} diff --git a/logrotate.d/ufw b/logrotate.d/ufw new file mode 100644 index 0000000..560f7a5 --- /dev/null +++ b/logrotate.d/ufw @@ -0,0 +1,13 @@ +/var/log/ufw.log +{ + rotate 4 + weekly + missingok + notifempty + compress + delaycompress + sharedscripts + postrotate + invoke-rc.d rsyslog rotate >/dev/null 2>&1 || true + endscript +} diff --git a/logrotate.d/wtmp b/logrotate.d/wtmp new file mode 100644 index 0000000..cc8a151 --- /dev/null +++ b/logrotate.d/wtmp @@ -0,0 +1,8 @@ +# no packages own wtmp -- we'll rotate it here +/var/log/wtmp { + missingok + monthly + create 0664 root utmp + minsize 1M + rotate 1 +} diff --git a/lsb-release b/lsb-release new file mode 100644 index 0000000..f310eb5 --- /dev/null +++ b/lsb-release @@ -0,0 +1,4 @@ +DISTRIB_ID=Ubuntu +DISTRIB_RELEASE=18.10 +DISTRIB_CODENAME=cosmic +DISTRIB_DESCRIPTION="Ubuntu 18.10" diff --git a/ltrace.conf b/ltrace.conf new file mode 100644 index 0000000..8f83986 --- /dev/null +++ b/ltrace.conf @@ -0,0 +1,543 @@ +; ltrace.conf +; +; ~/.ltrace.conf will also be read, if it exists. The -F option may be +; used to suppress the automatic inclusion of both this file and +; ~/.ltrace.conf, and load a different config file or config files +; instead. +; +; See ltrace.conf(5) for description of syntax of this file. + +; arpa/inet.h +typedef in_addr = struct(hex(uint)); +int inet_aton(string, +in_addr*); +hex(uint) inet_addr(string); +hex(uint) inet_network(string); +string inet_ntoa(in_addr); +in_addr inet_makeaddr(hex(int), hex(int)); +hex(uint) inet_lnaof(in_addr); +hex(uint) inet_netof(in_addr); + +; bfd.h +void bfd_init(); +int bfd_set_default_target(string); +addr bfd_scan_vma(string, addr, int); +addr bfd_openr(string,string); +int bfd_check_format(addr,int); + +; ctype.h +char tolower(char); +char toupper(char); +addr __ctype_b_loc(); +addr __ctype_tolower_loc(); +addr __ctype_toupper_loc(); +ulong __ctype_get_mb_cur_max(); + +; curses.h +int waddch(addr, char); +int mvprintw(int, int, format); +int wmove(addr, int, int); +int waddnstr(addr, string, int); +string tgoto(string, int, int); + +; dirent.h +int closedir(addr); +addr opendir(string); +addr readdir(addr); +addr readdir64(addr); + +; dlfcn.h +addr dlopen(string, int); +string dlerror(); +addr dlsym(addr, string); +int dlclose(addr); + +; errno.h +addr __errno_location(); + +; fcntl.h +int open(string,int,octal); ; WARNING: 3rd argument may not be there +int open64(string,int,octal); ; WARNING: 3rd argument may not be there + +; fnmatch.h +int fnmatch(string, string, int); + +; getopt.h +int getopt_long(int,addr,string,addr,int*); +int getopt_long_only(int,addr,string,addr,addr); + +; grp.h +void endgrent(); +addr getgrnam(string); +void setgrent(); +addr getgrent(); + +; libintl.h +string __dcgettext(string,string,int); +string bindtextdomain(string, string); +string textdomain(string); + +; libio.h +char _IO_getc(file); +int _IO_putc(char,file); + +; locale.h +string setlocale(enum(LC_CTYPE=0, LC_NUMERIC=1, LC_TIME=2, LC_COLLATE=3, LC_MONETARY=4, LC_MESSAGES=5, LC_ALL=6, LC_PAPER=7, LC_NAME=8, LC_ADDRESS=9, LC_TELEPHONE=10, LC_MEASUREMENT=11, LC_IDENTIFICATION=12), string); + +; mcheck.h +void mtrace(); +void muntrace(); + +; mqueue.h +int mq_open(string, int, octal, addr); ; WARNING: 3rd and 4th arguments may not be there +int mq_close(int); +int mq_unlink(string); +int mq_getattr(int, addr); +int mq_setattr(int, addr, addr); +int mq_notify(int, addr); +int mq_send(int, string3, ulong, uint); +int mq_timedsend(int, string3, ulong, uint, addr); +long mq_receive(int, +string0, ulong, addr); +long mq_timedreceive(int, +string0, ulong, addr, addr); + +; netdb.h +void endhostent(); +void endnetent(); +void endnetgrent(); +void endprotoent(); +void endservent(); +void freeaddrinfo(addr); +string gai_strerror(int); +int getaddrinfo(string, string, addr, addr); +addr gethostbyaddr(string, uint, int); +addr gethostbyname(string); +addr gethostent(); +int getnameinfo(addr, uint, string, uint, string, uint, uint); +addr getnetbyaddr(uint, int); +addr getnetbyname(string); +addr getnetent(); +int getnetgrent(addr, addr, addr); +addr getprotobyname(string); +addr getprotobynumber(int); +addr getprotoent(); +addr getservbyname(string, string); +addr getservbyport(int, string); +addr getservent(); +void herror(string); +string hstrerror(int); +int rcmd(addr, ushort, string, string, string, addr); +int rcmd_af(addr, ushort, string, string, string, addr, int); +int rexec(addr, int, string, string, string, addr); +int rexec_af(addr, int, string, string, string, addr, int); +int rresvport (addr); +int rresvport_af (addr, int); +int ruserok(string, int, string, string); +int ruserok_af(string, int, string, string, int); +void sethostent(int); +void setnetent(int); +int setnetgrent(string); +void setprotoent(int); +void setservent(int); + +; netinet/in.h +uint ntohs(uint); + +; pcap.h +string pcap_lookupdev(addr); +addr pcap_open_live(string, int, int, int, addr); +int pcap_snapshot(addr); +int pcap_lookupnet(string, addr, addr, addr); +int pcap_compile(addr, addr, string, int, addr); + +; pwd.h +string getpass(string); +void endpwent(); +addr getpwnam(string); +void setpwent(); + +; readline/readline.h +string readline(string); + +; signal.h +typedef signum = enum(SIGHUP=1, SIGINT=2, SIGQUIT=3, SIGILL=4, SIGTRAP=5, SIGABRT=6, SIGBUS=7, SIGFPE=8, SIGKILL=9, SIGUSR1=10, SIGSEGV=11, SIGUSR2=12, SIGPIPE=13, SIGALRM=14, SIGTERM=15, SIGSTKFLT=16, SIGCHLD=17, SIGCONT=18, SIGSTOP=19, SIGTSTP=20, SIGTTIN=21, SIGTTOU=22, SIGURG=23, SIGXCPU=24, SIGXFSZ=25, SIGVTALRM=26, SIGPROF=27, SIGWINCH=28, SIGIO=29, SIGPWR=30, SIGSYS=31, SIGRTMIN_0=32, SIGRTMIN_1=33, SIGRTMIN_2=34, SIGRTMIN_3=35, SIGRTMIN_4=36, SIGRTMIN_5=37, SIGRTMIN_6=38, SIGRTMIN_7=39, SIGRTMIN_8=40, SIGRTMIN_9=41, SIGRTMIN_10=42, SIGRTMIN_11=43, SIGRTMIN_12=44, SIGRTMIN_13=45, SIGRTMIN_14=46, SIGRTMIN_15=47, SIGRTMIN_16=48, SIGRTMIN_17=49, SIGRTMIN_18=50, SIGRTMIN_19=51, SIGRTMIN_20=52, SIGRTMIN_21=53, SIGRTMIN_22=54, SIGRTMIN_23=55, SIGRTMIN_24=56, SIGRTMIN_25=57, SIGRTMIN_26=58, SIGRTMIN_27=59, SIGRTMIN_28=60, SIGRTMIN_29=61, SIGRTMIN_30=62, SIGRTMIN_31=63); +typedef sigset_t = bitvec(ulong); +; elm3 should be flags +typedef sigaction = struct(addr, sigset_t, hex(int), addr); +int kill(int, signum); +int sigemptyset(+sigset_t*); +int sigaddset(+sigset_t*, signum); +int sigdelset(+sigset_t*, signum); +int sigfillset(+sigset_t*); +int sigismember(sigset_t*, signum); +addr signal(signum,addr); +int sigaction(signum, sigaction*, +sigaction*); +int sigprocmask(enum(SIG_BLOCK=1, SIG_UNBLOCK=2, SIG_SETMASK=3), sigset_t*, +sigset_t*); +int sigpending(+sigset_t*); +int sigsuspend(sigset_t*); +int sigisemptyset(sigset_t*); +int sigorset(+sigset_t*, sigset_t*, sigset_t*); +int sigandset(+sigset_t*, sigset_t*, sigset_t*); + +; stdio.h +int fclose(file); +int feof(file); +int ferror(file); +int fflush(file); +char fgetc(file); +addr fgets(+string, int, file); +int fileno(file); +file fopen(string,string); +file fopen64(string,string); +int fprintf(file,format); +int fputc(char,file); +int fputs(string,file); +ulong fread(addr,ulong,ulong,file); +ulong fread_unlocked(addr,ulong,ulong,file); +ulong fwrite(string,ulong,ulong,file); +ulong fwrite_unlocked(string,ulong,ulong,file); +int pclose(addr); +void perror(string); +addr popen(string, string); +int printf(format); +int puts(string); +int remove(string); +int snprintf(+string2,ulong,format); +int sprintf(+string,format); +string tempnam(string,string); +int vfprintf(file,string,addr); +int vsnprintf(+string2,ulong,string,addr); +int setvbuf(file,addr,int,ulong); +void setbuf(file,addr); +void setbuffer(file,addr,ulong); +void setlinebuf(file); +int rename(string,string); + +; stdlib.h +long __strtol_internal(string,addr,int); +ulong __strtoul_internal(string,addr,int); +int atexit(addr); +addr bsearch(string, addr, ulong, ulong, addr); +addr calloc(ulong, ulong); +void exit(int); +void free(addr); +string getenv(string); +int putenv(string); +int setenv(string,string,int); +void unsetenv(string); +addr malloc(ulong); +void qsort(addr,ulong,ulong,addr); +int random(); +addr realloc(addr,ulong); +void srandom(uint); +int system(string); + +; string.h +void bcopy(addr,addr,ulong); +void bzero(addr,ulong); +string basename(string); +string index(string,char); +addr memchr(string,char,ulong); +addr memcpy(addr,string(array(char, arg3)*),ulong); +addr memmove(addr,string(array(char, arg3)*),ulong); +addr memset(addr,char,long); +string rindex(string,char); +addr stpcpy(addr,string); +int strcasecmp(string, string); +string strcat(string, string); +string strchr(string,char); +int strcoll(string,string); +ulong strlen(string); +int strcmp(string,string); +addr strcpy(addr,string); +addr strdup(string); +string strerror(int); +int strncmp(string,string,ulong); +addr strncpy(addr,string3,ulong); +string strrchr(string,char); +string strsep(addr,string); +ulong strspn(string,string); +ulong strcspn(string,string); +string strstr(string,string); +string strtok(string, string); + +; sys/ioctl.h +int ioctl(int, int, addr); + +; sys/socket.h +int socket(int,int,int); + +; sys/stat.h +int __fxstat(int,int,addr); +int __xstat(int,string,addr); +int __lxstat(int,string,addr); +int __fxstat64(int,int,addr); +int __xstat64(int,string,addr); +int __lxstat64(int,string,addr); +int chmod(string,octal); +int fchmod(int,octal); +int mkfifo(string,octal); +octal umask(octal); + +; sys/utsname.h +int uname(addr); + +; sys/vfs.h +int statfs(string,addr); + +; syslog.h +void closelog(); +void openlog(string,int,int); +void syslog(int,format); + +; term.h +int tputs(string, int, addr); + +; termios.h +int tcgetattr(int,addr); +int tcsetattr(int,int,addr); + +; time.h +string ctime(addr); +int gettimeofday(addr, addr); +addr gmtime(addr); +addr localtime(addr); +ulong strftime(+string2,ulong,string,addr); +long time(addr); + +; unistd.h +void _exit(int); +int access(string, int); +uint alarm(uint); +int chdir(string); +int chown(string,int,int); +int close(int); +string crypt(string,string); +int dup2(int,int); +int execlp(string,string,addr,addr,addr); +int execv(string,addr); +int fchdir(int); +int fork(); +int ftruncate(int,ulong); +string2 getcwd(addr,ulong); +int getdomainname(+string2,ulong); +int geteuid(); +int getegid(); +int getgid(); +int gethostname(+string2,ulong); +string getlogin(); +int getopt(int,addr,string); +int getpid(); +int getppid(); +int getuid(); +int getpgrp(); +int setpgrp(); +int getpgid(int); +int isatty(int); +int link(string,string); +int mkdir(string,octal); +long read(int, +string[retval], ulong); +int rmdir(string); +int seteuid(uint); +int setgid(int); +int sethostname(+string2,ulong); +int setpgid(int,int); +int setreuid(uint, uint); +int setuid(int); +uint sleep(uint); +int symlink(string,string); +int sync(); +int truncate(string,ulong); +string ttyname(int); +int unlink(string); +void usleep(uint); +long write(int, string3, ulong); +addr sbrk(long); +int getpagesize(); +long lseek(int,long,int); +int pipe(addr); + +; utmp.h +void endutent(); +addr getutent(); +void setutent(); + +; wchar.h +int fwide(addr, int); + +; sys/wait.h +int wait(addr); +int waitpid(int,addr,int); + +; X11/Xlib.h +void XCloseDisplay(addr); +int XMapWindow(addr,addr); +addr XOpenDisplay(string); + +; sys/acl.h +int acl_add_perm(addr,uint); +int acl_calc_mask(addr); +int acl_clear_perms(addr); +int acl_copy_entry(addr,addr); +int acl_copy_ext(addr,addr,int); +addr acl_copy_int(addr); +int acl_create_entry(addr,addr); +int acl_delete_def_file(string); +int acl_delete_entry(addr,addr); +int acl_delete_perm(addr,uint); +addr acl_dup(addr); +int acl_free(addr); +addr acl_from_text(string); +int acl_get_entry(addr,int,addr); +addr acl_get_fd(int); +addr acl_get_file(string,int); +int acl_get_permset(addr,addr); +addr acl_get_qualifier(addr); +int acl_get_tag_type(addr,addr); +addr acl_init(int); +int acl_set_fd(int,addr); +int acl_set_file(string,int,addr); +int acl_set_permset(addr,addr); +int acl_set_qualifier(addr,addr); +int acl_set_tag_type(addr,int); +int acl_size(addr); +string acl_to_text(addr,addr); +int acl_valid(addr); + +; acl/libacl.h +int acl_check(addr,addr); +int acl_cmp(addr,addr); +int acl_entries(addr); +int acl_equiv_mode(addr,addr); +string acl_error(int); +int acl_extended_fd(int); +int acl_extended_file(string); +addr acl_from_mode(octal); +int acl_get_perm(addr,uint); +string acl_to_any_text(addr,string,char,int); + +; other symbols not included above +long a64l(string); +string l64a(long); +void abort(); +int abs(int); +long labs(long); + +typedef mntent = struct(string, string, string, string, int, int); +int addmntent(file, mntent*); +int endmntent(file); +int __endmntent(file); +file setmntent(string,string); +file __setmntent(string,string); +mntent *getmntent(addr); +mntent *getmntent_r(file, +mntent*, string, int); +mntent *__getmntent_r(file, +mntent*, string, int); +string hasmntopt(mntent*, string); + +; SYSCALLS +addr SYS_brk(addr); +int SYS_close(int); +int SYS_execve(string,addr,addr); +void SYS_exit(int); +void SYS_exit_group(int); +int SYS_fork(); +int SYS_getcwd(+string2,ulong); +int SYS_getpid(); +;addr SYS_mmap(addr,ulong,int,int,int,long); +int SYS_munmap(addr,ulong); +int SYS_open(string,int,octal); +int SYS_personality(uint); +long SYS_read(int,+string0,ulong); +int SYS_stat(string,addr); +octal SYS_umask(octal); +int SYS_uname(addr); +long SYS_write(int,string3,ulong); +int SYS_sync(); +int SYS_setxattr(string,string,addr,uint,int); +int SYS_lsetxattr(string,string,addr,uint,int); +int SYS_fsetxattr(int,string,addr,uint,int); +int SYS_getxattr(string,string,addr,uint); +int SYS_lgetxattr(string,string,addr,uint); +int SYS_fgetxattr(int,string,addr,uint); +int SYS_listxattr(string,addr,uint); +int SYS_llistxattr(string,addr,uint); +int SYS_flistxattr(int,addr,uint); +int SYS_removexattr(string,string); +int SYS_lremovexattr(string,string); +int SYS_fremovexattr(int,string); +int SYS_chdir(string); +int SYS_fchdir(int); +int SYS_chmod(string,octal); +int SYS_fchmod(int,octal); +int SYS_chown(string,int,int); +int SYS_fchown(int,int,int); +int SYS_lchown(string,int,int); +int SYS_chroot(string); +int SYS_dup(int); +int SYS_dup2(int,int); +int SYS_fdatasync(int); +int SYS_fsync(int); +int SYS_getpriority(int,int); +int SYS_setpriority(int,int,int); +int SYS_getrlimit(int,addr); +int SYS_setrlimit(int,addr); +int SYS_gettimeofday(addr,addr); +int SYS_settimeofday(addr,addr); +int SYS_setfsgid(int); +int SYS_setfsuid(int); +int SYS_getuid(); +int SYS_setuid(int); +int SYS_getgid(); +int SYS_setgid(int); +int SYS_getsid(int); +int SYS_setsid(int); +int SYS_setreuid(int,int); +int SYS_setregid(int,int); +int SYS_geteuid(); +int SYS_getegid(); +int SYS_setpgid(int,int); +int SYS_getresuid(addr,addr,addr); +int SYS_setresuid(int,int,int); +int SYS_getresgid(addr,addr,addr); +int SYS_setresgid(int,int,int); +int SYS_kill(int,int); +int SYS_link(string,string); +int SYS_madvise(addr,ulong,int); +int SYS_mkdir(string,octal); +int SYS_mknod(string,octal,int); +int SYS_msync(addr,ulong,int); +int SYS_nice(int); +int SYS_poll(addr,uint,int); +int SYS_readdir(uint,addr,uint); +int SYS_readlink(string,string,ulong); +int SYS_reboot(int,int,int,addr); +int SYS_rename(string,string); +int SYS_rmdir(string); +int SYS_sigaltstack(addr,addr); +int SYS_statfs(string,addr); +int SYS_fstatfs(int,addr); +int SYS_fstat(int,addr); +int SYS_lstat(string,addr); +int SYS_stime(addr); +int SYS_symlink(string, string); +int SYS_sysinfo(addr); +int SYS_syslog(int,string,int); +int SYS_truncate(string,long); +int SYS_ftruncate(int,long); +int SYS_mount(string,string,string,ulong,addr); +int SYS_umount(string); +int SYS_umount2(string,int); +int SYS_unlink(string); +int SYS_utime(string,addr); +long SYS_lseek(int,long,int); +addr SYS_signal(int,addr); +int SYS_sigaction(int,addr,addr); +int SYS_pause(); +int SYS_sigpending(addr); +int SYS_sigprocmask(int,addr,addr); +int SYS_sigqueue(int,int,addr); +int SYS_sigsuspend(addr); +int SYS_wait(addr); +int SYS_waitpid(int,addr,int); +ulong SYS_readv(int,addr,int); +ulong SYS_writev(int,addr,int); +int SYS_mprotect(addr,int,int); +int SYS_access(string,octal); diff --git a/machine-id b/machine-id new file mode 100644 index 0000000..0bf4519 --- /dev/null +++ b/machine-id @@ -0,0 +1 @@ +d1dcdad6d2be48abb533070391468dc5 diff --git a/magic b/magic new file mode 100644 index 0000000..283a863 --- /dev/null +++ b/magic @@ -0,0 +1,3 @@ +# Magic local data for file(1) command. +# Insert here your local magic data. Format is described in magic(5). + diff --git a/magic.mime b/magic.mime new file mode 100644 index 0000000..283a863 --- /dev/null +++ b/magic.mime @@ -0,0 +1,3 @@ +# Magic local data for file(1) command. +# Insert here your local magic data. Format is described in magic(5). + diff --git a/mailcap b/mailcap new file mode 100644 index 0000000..fca0dcc --- /dev/null +++ b/mailcap @@ -0,0 +1,65 @@ +############################################################################### +# +# MIME media types and programs that process those types +# +# Much of this file is generated automatically by the program "update-mime". +# Please see the "update-mime" man page for more information. +# +# Users can add their own rules if they wish by creating a ".mailcap" +# file in their home directory. Entries included there will take +# precedence over those listed here. +# +############################################################################### + + +############################################################################### +# +# User section follows: Any entries included in this section will take +# precedence over those created by "update-mime". DO NOT CHANGE the +# "User Section Begins" and "User Section Ends" lines, or anything outside +# of this section! +# + +# ----- User Section Begins ----- # +# ----- User Section Ends ----- # + +############################################################################### + +text/plain; less '%s'; needsterminal +application/x-troff-man; /usr/bin/man -X100 -l '%s'; test=test -n "$DISPLAY" -a -e /usr/bin/gxditview; description=Man page +text/troff; /usr/bin/man -X100 -l '%s'; test=test -n "$DISPLAY" -a -e /usr/bin/gxditview; description=Man page +application/x-troff-man; /usr/bin/man -l '%s'; needsterminal; description=Man page +text/troff; /usr/bin/man -l '%s'; needsterminal; description=Man page +text/html; /usr/bin/sensible-browser %s; description=HTML Text; nametemplate=%s.html +application/x-troff-man; /usr/bin/nroff -mandoc -Tutf8; copiousoutput; print=/usr/bin/nroff -mandoc -Tutf8 | print text/plain:- +text/troff; /usr/bin/nroff -mandoc -Tutf8; copiousoutput; print=/usr/bin/nroff -mandoc -Tutf8 | print text/plain:- +application/x-info; /usr/bin/info -f '%s'; needsterminal; description=GNU Info document +text/plain; more %s; needsterminal +text/english; vim %s; needsterminal +text/plain; vim %s; needsterminal +text/x-makefile; vim %s; needsterminal +text/x-c++hdr; vim %s; needsterminal +text/x-c++src; vim %s; needsterminal +text/x-chdr; vim %s; needsterminal +text/x-csrc; vim %s; needsterminal +text/x-java; vim %s; needsterminal +text/x-moc; vim %s; needsterminal +text/x-pascal; vim %s; needsterminal +text/x-tcl; vim %s; needsterminal +text/x-tex; vim %s; needsterminal +application/x-shellscript; vim %s; needsterminal +text/x-c; vim %s; needsterminal +text/x-c++; vim %s; needsterminal +text/plain; view %s; edit=vim %s; compose=vim %s; test=test -x /usr/bin/vim; needsterminal +text/plain; view %s; edit=vi %s; compose=vi %s; needsterminal +application/x-troff-man; /usr/bin/man -Tascii -l '%s' | col -b; copiousoutput; description=Man page +text/troff; /usr/bin/man -Tascii -l '%s' | col -b; copiousoutput; description=Man page +text/*; less '%s'; needsterminal +text/*; view %s; edit=vim %s; compose=vim %s; test=test -x /usr/bin/vim; needsterminal +application/x-info; /usr/bin/info --subnodes -o /dev/stdout -f '%s' 2>/dev/null; copiousoutput; description=GNU Info document +application/x-tar; /bin/tar tvf '%s'; print=/bin/tar tvf - | print text/plain:-; copiousoutput +application/x-gtar; /bin/tar tvf '%s'; print=/bin/tar tvf - | print text/plain:-; copiousoutput +application/x-ustar; /bin/tar tvf '%s'; print=/bin/tar tvf - | print text/plain:-; copiousoutput +text/*; more %s; needsterminal +text/*; view %s; edit=vi %s; compose=vi %s; needsterminal +application/vnd.debian.binary-package; /usr/lib/mime/debian-view %s; needsterminal; description=Debian GNU/Linux Package; nametemplate=%s.deb diff --git a/mailcap.order b/mailcap.order new file mode 100644 index 0000000..7f38c23 --- /dev/null +++ b/mailcap.order @@ -0,0 +1,10 @@ +############################################################################### +# +# Mailcap.order: This file allows a system-wide override of MIME program +# preferences. See the mailcap.order(5) man page for more information. +# +# After modifying this file, be sure to run /usr/sbin/update-mime (as root) +# to propagate the changes into the /etc/mailcap file. +# +################################################################################ + diff --git a/mailname b/mailname new file mode 100644 index 0000000..f4775ee --- /dev/null +++ b/mailname @@ -0,0 +1 @@ +vmd36020.contaboserver.net diff --git a/manpath.config b/manpath.config new file mode 100644 index 0000000..722a52d --- /dev/null +++ b/manpath.config @@ -0,0 +1,131 @@ +# manpath.config +# +# This file is used by the man-db package to configure the man and cat paths. +# It is also used to provide a manpath for those without one by examining +# their PATH environment variable. For details see the manpath(5) man page. +# +# Lines beginning with `#' are comments and are ignored. Any combination of +# tabs or spaces may be used as `whitespace' separators. +# +# There are three mappings allowed in this file: +# -------------------------------------------------------- +# MANDATORY_MANPATH manpath_element +# MANPATH_MAP path_element manpath_element +# MANDB_MAP global_manpath [relative_catpath] +#--------------------------------------------------------- +# every automatically generated MANPATH includes these fields +# +#MANDATORY_MANPATH /usr/src/pvm3/man +# +MANDATORY_MANPATH /usr/man +MANDATORY_MANPATH /usr/share/man +MANDATORY_MANPATH /usr/local/share/man +#--------------------------------------------------------- +# set up PATH to MANPATH mapping +# ie. what man tree holds man pages for what binary directory. +# +# *PATH* -> *MANPATH* +# +MANPATH_MAP /bin /usr/share/man +MANPATH_MAP /usr/bin /usr/share/man +MANPATH_MAP /sbin /usr/share/man +MANPATH_MAP /usr/sbin /usr/share/man +MANPATH_MAP /usr/local/bin /usr/local/man +MANPATH_MAP /usr/local/bin /usr/local/share/man +MANPATH_MAP /usr/local/sbin /usr/local/man +MANPATH_MAP /usr/local/sbin /usr/local/share/man +MANPATH_MAP /usr/X11R6/bin /usr/X11R6/man +MANPATH_MAP /usr/bin/X11 /usr/X11R6/man +MANPATH_MAP /usr/games /usr/share/man +MANPATH_MAP /opt/bin /opt/man +MANPATH_MAP /opt/sbin /opt/man +#--------------------------------------------------------- +# For a manpath element to be treated as a system manpath (as most of those +# above should normally be), it must be mentioned below. Each line may have +# an optional extra string indicating the catpath associated with the +# manpath. If no catpath string is used, the catpath will default to the +# given manpath. +# +# You *must* provide all system manpaths, including manpaths for alternate +# operating systems, locale specific manpaths, and combinations of both, if +# they exist, otherwise the permissions of the user running man/mandb will +# be used to manipulate the manual pages. Also, mandb will not initialise +# the database cache for any manpaths not mentioned below unless explicitly +# requested to do so. +# +# In a per-user configuration file, this directive only controls the +# location of catpaths and the creation of database caches; it has no effect +# on privileges. +# +# Any manpaths that are subdirectories of other manpaths must be mentioned +# *before* the containing manpath. E.g. /usr/man/preformat must be listed +# before /usr/man. +# +# *MANPATH* -> *CATPATH* +# +MANDB_MAP /usr/man /var/cache/man/fsstnd +MANDB_MAP /usr/share/man /var/cache/man +MANDB_MAP /usr/local/man /var/cache/man/oldlocal +MANDB_MAP /usr/local/share/man /var/cache/man/local +MANDB_MAP /usr/X11R6/man /var/cache/man/X11R6 +MANDB_MAP /opt/man /var/cache/man/opt +# +#--------------------------------------------------------- +# Program definitions. These are commented out by default as the value +# of the definition is already the default. To change: uncomment a +# definition and modify it. +# +#DEFINE pager pager +#DEFINE cat cat +#DEFINE tr tr '\255\267\264\327' '\055\157\047\170' +#DEFINE grep grep +#DEFINE troff groff -mandoc +#DEFINE nroff nroff -mandoc +#DEFINE eqn eqn +#DEFINE neqn neqn +#DEFINE tbl tbl +#DEFINE col col +#DEFINE vgrind vgrind +#DEFINE refer refer +#DEFINE grap grap +#DEFINE pic pic -S +# +#DEFINE compressor gzip -c7 +#--------------------------------------------------------- +# Misc definitions: same as program definitions above. +# +#DEFINE whatis_grep_flags -i +#DEFINE apropos_grep_flags -iEw +#DEFINE apropos_regex_grep_flags -iE +#--------------------------------------------------------- +# Section names. Manual sections will be searched in the order listed here; +# the default is 1, n, l, 8, 3, 0, 2, 5, 4, 9, 6, 7. Multiple SECTION +# directives may be given for clarity, and will be concatenated together in +# the expected way. +# If a particular extension is not in this list (say, 1mh), it will be +# displayed with the rest of the section it belongs to. The effect of this +# is that you only need to explicitly list extensions if you want to force a +# particular order. Sections with extensions should usually be adjacent to +# their main section (e.g. "1 1mh 8 ..."). +# +SECTION 1 n l 8 3 2 3posix 3pm 3perl 3am 5 4 9 6 7 +# +#--------------------------------------------------------- +# Range of terminal widths permitted when displaying cat pages. If the +# terminal falls outside this range, cat pages will not be created (if +# missing) or displayed. +# +#MINCATWIDTH 80 +#MAXCATWIDTH 80 +# +# If CATWIDTH is set to a non-zero number, cat pages will always be +# formatted for a terminal of the given width, regardless of the width of +# the terminal actually being used. This should generally be within the +# range set by MINCATWIDTH and MAXCATWIDTH. +# +#CATWIDTH 0 +# +#--------------------------------------------------------- +# Flags. +# NOCACHE keeps man from creating cat pages. +#NOCACHE diff --git a/mime.types b/mime.types new file mode 100644 index 0000000..3f31ff2 --- /dev/null +++ b/mime.types @@ -0,0 +1,836 @@ +############################################################################### +# +# MIME media types and the extensions that represent them. +# +# The format of this file is a media type on the left and zero or more +# filename extensions on the right. Programs using this file will map +# files ending with those extensions to the associated type. +# +# This file is part of the "mime-support" package. Please report a bug using +# the "reportbug" command of the "reportbug" package if you would like new +# types or extensions to be added. +# +# The reason that all types are managed by the mime-support package instead +# allowing individual packages to install types in much the same way as they +# add entries in to the mailcap file is so these types can be referenced by +# other programs (such as a web server) even if the specific support package +# for that type is not installed. +# +# Users can add their own types if they wish by creating a ".mime.types" +# file in their home directory. Definitions included there will take +# precedence over those listed here. +# +############################################################################### + + +application/activemessage +application/andrew-inset ez +application/annodex anx +application/applefile +application/atom+xml atom +application/atomcat+xml atomcat +application/atomicmail +application/atomserv+xml atomsrv +application/batch-SMTP +application/bbolin lin +application/beep+xml +application/cals-1840 +application/commonground +application/cu-seeme cu +application/cybercash +application/davmount+xml davmount +application/dca-rft +application/dec-dx +application/dicom dcm +application/docbook+xml +application/dsptype tsp +application/dvcs +application/ecmascript es +application/edi-consent +application/edi-x12 +application/edifact +application/eshop +application/font-sfnt otf ttf +application/font-tdpfr pfr +application/font-woff woff +application/futuresplash spl +application/ghostview +application/gzip gz +application/hta hta +application/http +application/hyperstudio +application/iges +application/index +application/index.cmd +application/index.obj +application/index.response +application/index.vnd +application/iotp +application/ipp +application/isup +application/java-archive jar +application/java-serialized-object ser +application/java-vm class +application/javascript js +application/json json +application/m3g m3g +application/mac-binhex40 hqx +application/mac-compactpro cpt +application/macwriteii +application/marc +application/mathematica nb nbp +application/mbox mbox +application/ms-tnef +application/msaccess mdb +application/msword doc dot +application/mxf mxf +application/news-message-id +application/news-transmission +application/ocsp-request +application/ocsp-response +application/octet-stream bin deploy msu msp +application/oda oda +application/oebps-package+xml opf +application/ogg ogx +application/onenote one onetoc2 onetmp onepkg +application/parityfec +application/pdf pdf +application/pgp-encrypted pgp +application/pgp-keys key +application/pgp-signature sig +application/pics-rules prf +application/pkcs10 +application/pkcs7-mime +application/pkcs7-signature +application/pkix-cert +application/pkix-crl +application/pkixcmp +application/postscript ps ai eps epsi epsf eps2 eps3 +application/prs.alvestrand.titrax-sheet +application/prs.cww +application/prs.nprend +application/qsig +application/rar rar +application/rdf+xml rdf +application/remote-printing +application/riscos +application/rtf rtf +application/sdp +application/set-payment +application/set-payment-initiation +application/set-registration +application/set-registration-initiation +application/sgml +application/sgml-open-catalog +application/sieve +application/sla stl +application/slate +application/smil+xml smi smil +application/timestamp-query +application/timestamp-reply +application/vemmi +application/whoispp-query +application/whoispp-response +application/wita +application/x400-bp +application/xhtml+xml xhtml xht +application/xml xml xsd +application/xml-dtd +application/xml-external-parsed-entity +application/xslt+xml xsl xslt +application/xspf+xml xspf +application/zip zip +application/vnd.3M.Post-it-Notes +application/vnd.accpac.simply.aso +application/vnd.accpac.simply.imp +application/vnd.acucobol +application/vnd.aether.imp +application/vnd.android.package-archive apk +application/vnd.anser-web-certificate-issue-initiation +application/vnd.anser-web-funds-transfer-initiation +application/vnd.audiograph +application/vnd.bmi +application/vnd.businessobjects +application/vnd.canon-cpdl +application/vnd.canon-lips +application/vnd.cinderella cdy +application/vnd.claymore +application/vnd.commerce-battelle +application/vnd.commonspace +application/vnd.comsocaller +application/vnd.contact.cmsg +application/vnd.cosmocaller +application/vnd.ctc-posml +application/vnd.cups-postscript +application/vnd.cups-raster +application/vnd.cups-raw +application/vnd.cybank +application/vnd.debian.binary-package deb ddeb udeb +application/vnd.dna +application/vnd.dpgraph +application/vnd.dxr +application/vnd.ecdis-update +application/vnd.ecowin.chart +application/vnd.ecowin.filerequest +application/vnd.ecowin.fileupdate +application/vnd.ecowin.series +application/vnd.ecowin.seriesrequest +application/vnd.ecowin.seriesupdate +application/vnd.enliven +application/vnd.epson.esf +application/vnd.epson.msf +application/vnd.epson.quickanime +application/vnd.epson.salt +application/vnd.epson.ssf +application/vnd.ericsson.quickcall +application/vnd.eudora.data +application/vnd.fdf +application/vnd.ffsns +application/vnd.flographit +application/vnd.font-fontforge-sfd sfd +application/vnd.framemaker +application/vnd.fsc.weblaunch +application/vnd.fujitsu.oasys +application/vnd.fujitsu.oasys2 +application/vnd.fujitsu.oasys3 +application/vnd.fujitsu.oasysgp +application/vnd.fujitsu.oasysprs +application/vnd.fujixerox.ddd +application/vnd.fujixerox.docuworks +application/vnd.fujixerox.docuworks.binder +application/vnd.fut-misnet +application/vnd.google-earth.kml+xml kml +application/vnd.google-earth.kmz kmz +application/vnd.grafeq +application/vnd.groove-account +application/vnd.groove-identity-message +application/vnd.groove-injector +application/vnd.groove-tool-message +application/vnd.groove-tool-template +application/vnd.groove-vcard +application/vnd.hhe.lesson-player +application/vnd.hp-HPGL +application/vnd.hp-PCL +application/vnd.hp-PCLXL +application/vnd.hp-hpid +application/vnd.hp-hps +application/vnd.httphone +application/vnd.hzn-3d-crossword +application/vnd.ibm.MiniPay +application/vnd.ibm.afplinedata +application/vnd.ibm.modcap +application/vnd.informix-visionary +application/vnd.intercon.formnet +application/vnd.intertrust.digibox +application/vnd.intertrust.nncp +application/vnd.intu.qbo +application/vnd.intu.qfx +application/vnd.irepository.package+xml +application/vnd.is-xpr +application/vnd.japannet-directory-service +application/vnd.japannet-jpnstore-wakeup +application/vnd.japannet-payment-wakeup +application/vnd.japannet-registration +application/vnd.japannet-registration-wakeup +application/vnd.japannet-setstore-wakeup +application/vnd.japannet-verification +application/vnd.japannet-verification-wakeup +application/vnd.koan +application/vnd.lotus-1-2-3 +application/vnd.lotus-approach +application/vnd.lotus-freelance +application/vnd.lotus-notes +application/vnd.lotus-organizer +application/vnd.lotus-screencam +application/vnd.lotus-wordpro +application/vnd.mcd +application/vnd.mediastation.cdkey +application/vnd.meridian-slingshot +application/vnd.mif +application/vnd.minisoft-hp3000-save +application/vnd.mitsubishi.misty-guard.trustweb +application/vnd.mobius.daf +application/vnd.mobius.dis +application/vnd.mobius.msl +application/vnd.mobius.plc +application/vnd.mobius.txf +application/vnd.motorola.flexsuite +application/vnd.motorola.flexsuite.adsi +application/vnd.motorola.flexsuite.fis +application/vnd.motorola.flexsuite.gotap +application/vnd.motorola.flexsuite.kmr +application/vnd.motorola.flexsuite.ttc +application/vnd.motorola.flexsuite.wem +application/vnd.mozilla.xul+xml xul +application/vnd.ms-artgalry +application/vnd.ms-asf +application/vnd.ms-excel xls xlb xlt +application/vnd.ms-excel.addin.macroEnabled.12 xlam +application/vnd.ms-excel.sheet.binary.macroEnabled.12 xlsb +application/vnd.ms-excel.sheet.macroEnabled.12 xlsm +application/vnd.ms-excel.template.macroEnabled.12 xltm +application/vnd.ms-fontobject eot +application/vnd.ms-lrm +application/vnd.ms-officetheme thmx +application/vnd.ms-pki.seccat cat +#application/vnd.ms-pki.stl stl +application/vnd.ms-powerpoint ppt pps +application/vnd.ms-powerpoint.addin.macroEnabled.12 ppam +application/vnd.ms-powerpoint.presentation.macroEnabled.12 pptm +application/vnd.ms-powerpoint.slide.macroEnabled.12 sldm +application/vnd.ms-powerpoint.slideshow.macroEnabled.12 ppsm +application/vnd.ms-powerpoint.template.macroEnabled.12 potm +application/vnd.ms-project +application/vnd.ms-tnef +application/vnd.ms-word.document.macroEnabled.12 docm +application/vnd.ms-word.template.macroEnabled.12 dotm +application/vnd.ms-works +application/vnd.mseq +application/vnd.msign +application/vnd.music-niff +application/vnd.musician +application/vnd.netfpx +application/vnd.noblenet-directory +application/vnd.noblenet-sealer +application/vnd.noblenet-web +application/vnd.novadigm.EDM +application/vnd.novadigm.EDX +application/vnd.novadigm.EXT +application/vnd.oasis.opendocument.chart odc +application/vnd.oasis.opendocument.database odb +application/vnd.oasis.opendocument.formula odf +application/vnd.oasis.opendocument.graphics odg +application/vnd.oasis.opendocument.graphics-template otg +application/vnd.oasis.opendocument.image odi +application/vnd.oasis.opendocument.presentation odp +application/vnd.oasis.opendocument.presentation-template otp +application/vnd.oasis.opendocument.spreadsheet ods +application/vnd.oasis.opendocument.spreadsheet-template ots +application/vnd.oasis.opendocument.text odt +application/vnd.oasis.opendocument.text-master odm +application/vnd.oasis.opendocument.text-template ott +application/vnd.oasis.opendocument.text-web oth +application/vnd.openxmlformats-officedocument.presentationml.presentation pptx +application/vnd.openxmlformats-officedocument.presentationml.slide sldx +application/vnd.openxmlformats-officedocument.presentationml.slideshow ppsx +application/vnd.openxmlformats-officedocument.presentationml.template potx +application/vnd.openxmlformats-officedocument.spreadsheetml.sheet xlsx +application/vnd.openxmlformats-officedocument.spreadsheetml.template xltx +application/vnd.openxmlformats-officedocument.wordprocessingml.document docx +application/vnd.openxmlformats-officedocument.wordprocessingml.template dotx +application/vnd.osa.netdeploy +application/vnd.palm +application/vnd.pg.format +application/vnd.pg.osasli +application/vnd.powerbuilder6 +application/vnd.powerbuilder6-s +application/vnd.powerbuilder7 +application/vnd.powerbuilder7-s +application/vnd.powerbuilder75 +application/vnd.powerbuilder75-s +application/vnd.previewsystems.box +application/vnd.publishare-delta-tree +application/vnd.pvi.ptid1 +application/vnd.pwg-xhtml-print+xml +application/vnd.rapid +application/vnd.rim.cod cod +application/vnd.s3sms +application/vnd.seemail +application/vnd.shana.informed.formdata +application/vnd.shana.informed.formtemplate +application/vnd.shana.informed.interchange +application/vnd.shana.informed.package +application/vnd.smaf mmf +application/vnd.sss-cod +application/vnd.sss-dtf +application/vnd.sss-ntf +application/vnd.stardivision.calc sdc +application/vnd.stardivision.chart sds +application/vnd.stardivision.draw sda +application/vnd.stardivision.impress sdd +application/vnd.stardivision.math sdf +application/vnd.stardivision.writer sdw +application/vnd.stardivision.writer-global sgl +application/vnd.street-stream +application/vnd.sun.xml.calc sxc +application/vnd.sun.xml.calc.template stc +application/vnd.sun.xml.draw sxd +application/vnd.sun.xml.draw.template std +application/vnd.sun.xml.impress sxi +application/vnd.sun.xml.impress.template sti +application/vnd.sun.xml.math sxm +application/vnd.sun.xml.writer sxw +application/vnd.sun.xml.writer.global sxg +application/vnd.sun.xml.writer.template stw +application/vnd.svd +application/vnd.swiftview-ics +application/vnd.symbian.install sis +application/vnd.tcpdump.pcap cap pcap +application/vnd.triscape.mxs +application/vnd.trueapp +application/vnd.truedoc +application/vnd.tve-trigger +application/vnd.ufdl +application/vnd.uplanet.alert +application/vnd.uplanet.alert-wbxml +application/vnd.uplanet.bearer-choice +application/vnd.uplanet.bearer-choice-wbxml +application/vnd.uplanet.cacheop +application/vnd.uplanet.cacheop-wbxml +application/vnd.uplanet.channel +application/vnd.uplanet.channel-wbxml +application/vnd.uplanet.list +application/vnd.uplanet.list-wbxml +application/vnd.uplanet.listcmd +application/vnd.uplanet.listcmd-wbxml +application/vnd.uplanet.signal +application/vnd.vcx +application/vnd.vectorworks +application/vnd.vidsoft.vidconference +application/vnd.visio vsd vst vsw vss +application/vnd.vividence.scriptfile +application/vnd.wap.sic +application/vnd.wap.slc +application/vnd.wap.wbxml wbxml +application/vnd.wap.wmlc wmlc +application/vnd.wap.wmlscriptc wmlsc +application/vnd.webturbo +application/vnd.wordperfect wpd +application/vnd.wordperfect5.1 wp5 +application/vnd.wrq-hp3000-labelled +application/vnd.wt.stf +application/vnd.xara +application/vnd.xfdl +application/vnd.yellowriver-custom-menu +application/zlib +application/x-123 wk +application/x-7z-compressed 7z +application/x-abiword abw +application/x-apple-diskimage dmg +application/x-bcpio bcpio +application/x-bittorrent torrent +application/x-cab cab +application/x-cbr cbr +application/x-cbz cbz +application/x-cdf cdf cda +application/x-cdlink vcd +application/x-chess-pgn pgn +application/x-comsol mph +application/x-core +application/x-cpio cpio +application/x-csh csh +application/x-debian-package deb udeb +application/x-director dcr dir dxr +application/x-dms dms +application/x-doom wad +application/x-dvi dvi +application/x-executable +application/x-font pfa pfb gsf +application/x-font-pcf pcf pcf.Z +application/x-freemind mm +application/x-futuresplash spl +application/x-ganttproject gan +application/x-gnumeric gnumeric +application/x-go-sgf sgf +application/x-graphing-calculator gcf +application/x-gtar gtar +application/x-gtar-compressed tgz taz +application/x-hdf hdf +#application/x-httpd-eruby rhtml +#application/x-httpd-php phtml pht php +#application/x-httpd-php-source phps +#application/x-httpd-php3 php3 +#application/x-httpd-php3-preprocessed php3p +#application/x-httpd-php4 php4 +#application/x-httpd-php5 php5 +application/x-hwp hwp +application/x-ica ica +application/x-info info +application/x-internet-signup ins isp +application/x-iphone iii +application/x-iso9660-image iso +application/x-jam jam +application/x-java-applet +application/x-java-bean +application/x-java-jnlp-file jnlp +application/x-jmol jmz +application/x-kchart chrt +application/x-kdelnk +application/x-killustrator kil +application/x-koan skp skd skt skm +application/x-kpresenter kpr kpt +application/x-kspread ksp +application/x-kword kwd kwt +application/x-latex latex +application/x-lha lha +application/x-lyx lyx +application/x-lzh lzh +application/x-lzx lzx +application/x-maker frm maker frame fm fb book fbdoc +application/x-mif mif +application/x-mpegURL m3u8 +application/x-ms-application application +application/x-ms-manifest manifest +application/x-ms-wmd wmd +application/x-ms-wmz wmz +application/x-msdos-program com exe bat dll +application/x-msi msi +application/x-netcdf nc +application/x-ns-proxy-autoconfig pac +application/x-nwc nwc +application/x-object o +application/x-oz-application oza +application/x-pkcs7-certreqresp p7r +application/x-pkcs7-crl crl +application/x-python-code pyc pyo +application/x-qgis qgs shp shx +application/x-quicktimeplayer qtl +application/x-rdp rdp +application/x-redhat-package-manager rpm +application/x-rss+xml rss +application/x-ruby rb +application/x-rx +application/x-scilab sci sce +application/x-scilab-xcos xcos +application/x-sh sh +application/x-shar shar +application/x-shellscript +application/x-shockwave-flash swf swfl +application/x-silverlight scr +application/x-sql sql +application/x-stuffit sit sitx +application/x-sv4cpio sv4cpio +application/x-sv4crc sv4crc +application/x-tar tar +application/x-tcl tcl +application/x-tex-gf gf +application/x-tex-pk pk +application/x-texinfo texinfo texi +application/x-trash ~ % bak old sik +application/x-troff t tr roff +application/x-troff-man man +application/x-troff-me me +application/x-troff-ms ms +application/x-ustar ustar +application/x-videolan +application/x-wais-source src +application/x-wingz wz +application/x-x509-ca-cert crt +application/x-xcf xcf +application/x-xfig fig +application/x-xpinstall xpi +application/x-xz xz + +audio/32kadpcm +audio/3gpp +audio/amr amr +audio/amr-wb awb +audio/annodex axa +audio/basic au snd +audio/csound csd orc sco +audio/flac flac +audio/g.722.1 +audio/l16 +audio/midi mid midi kar +audio/mp4a-latm +audio/mpa-robust +audio/mpeg mpga mpega mp2 mp3 m4a +audio/mpegurl m3u +audio/ogg oga ogg opus spx +audio/parityfec +audio/prs.sid sid +audio/telephone-event +audio/tone +audio/vnd.cisco.nse +audio/vnd.cns.anp1 +audio/vnd.cns.inf1 +audio/vnd.digital-winds +audio/vnd.everad.plj +audio/vnd.lucent.voice +audio/vnd.nortel.vbk +audio/vnd.nuera.ecelp4800 +audio/vnd.nuera.ecelp7470 +audio/vnd.nuera.ecelp9600 +audio/vnd.octel.sbc +audio/vnd.qcelp +audio/vnd.rhetorex.32kadpcm +audio/vnd.vmx.cvsd +audio/x-aiff aif aiff aifc +audio/x-gsm gsm +audio/x-mpegurl m3u +audio/x-ms-wma wma +audio/x-ms-wax wax +audio/x-pn-realaudio-plugin +audio/x-pn-realaudio ra rm ram +audio/x-realaudio ra +audio/x-scpls pls +audio/x-sd2 sd2 +audio/x-wav wav + +chemical/x-alchemy alc +chemical/x-cache cac cache +chemical/x-cache-csf csf +chemical/x-cactvs-binary cbin cascii ctab +chemical/x-cdx cdx +chemical/x-cerius cer +chemical/x-chem3d c3d +chemical/x-chemdraw chm +chemical/x-cif cif +chemical/x-cmdf cmdf +chemical/x-cml cml +chemical/x-compass cpa +chemical/x-crossfire bsd +chemical/x-csml csml csm +chemical/x-ctx ctx +chemical/x-cxf cxf cef +#chemical/x-daylight-smiles smi +chemical/x-embl-dl-nucleotide emb embl +chemical/x-galactic-spc spc +chemical/x-gamess-input inp gam gamin +chemical/x-gaussian-checkpoint fch fchk +chemical/x-gaussian-cube cub +chemical/x-gaussian-input gau gjc gjf +chemical/x-gaussian-log gal +chemical/x-gcg8-sequence gcg +chemical/x-genbank gen +chemical/x-hin hin +chemical/x-isostar istr ist +chemical/x-jcamp-dx jdx dx +chemical/x-kinemage kin +chemical/x-macmolecule mcm +chemical/x-macromodel-input mmd mmod +chemical/x-mdl-molfile mol +chemical/x-mdl-rdfile rd +chemical/x-mdl-rxnfile rxn +chemical/x-mdl-sdfile sd sdf +chemical/x-mdl-tgf tgf +#chemical/x-mif mif +chemical/x-mmcif mcif +chemical/x-mol2 mol2 +chemical/x-molconn-Z b +chemical/x-mopac-graph gpt +chemical/x-mopac-input mop mopcrt mpc zmt +chemical/x-mopac-out moo +chemical/x-mopac-vib mvb +chemical/x-ncbi-asn1 asn +chemical/x-ncbi-asn1-ascii prt ent +chemical/x-ncbi-asn1-binary val aso +chemical/x-ncbi-asn1-spec asn +chemical/x-pdb pdb ent +chemical/x-rosdal ros +chemical/x-swissprot sw +chemical/x-vamas-iso14976 vms +chemical/x-vmd vmd +chemical/x-xtel xtel +chemical/x-xyz xyz + +image/cgm +image/g3fax +image/gif gif +image/ief ief +image/jp2 jp2 jpg2 +image/jpeg jpeg jpg jpe +image/jpm jpm +image/jpx jpx jpf +image/naplps +image/pcx pcx +image/png png +image/prs.btif +image/prs.pti +image/svg+xml svg svgz +image/tiff tiff tif +image/vnd.cns.inf2 +image/vnd.djvu djvu djv +image/vnd.dwg +image/vnd.dxf +image/vnd.fastbidsheet +image/vnd.fpx +image/vnd.fst +image/vnd.fujixerox.edmics-mmr +image/vnd.fujixerox.edmics-rlc +image/vnd.microsoft.icon ico +image/vnd.mix +image/vnd.net-fpx +image/vnd.svf +image/vnd.wap.wbmp wbmp +image/vnd.xiff +image/x-canon-cr2 cr2 +image/x-canon-crw crw +image/x-cmu-raster ras +image/x-coreldraw cdr +image/x-coreldrawpattern pat +image/x-coreldrawtemplate cdt +image/x-corelphotopaint cpt +image/x-epson-erf erf +image/x-icon +image/x-jg art +image/x-jng jng +image/x-ms-bmp bmp +image/x-nikon-nef nef +image/x-olympus-orf orf +image/x-photoshop psd +image/x-portable-anymap pnm +image/x-portable-bitmap pbm +image/x-portable-graymap pgm +image/x-portable-pixmap ppm +image/x-rgb rgb +image/x-xbitmap xbm +image/x-xpixmap xpm +image/x-xwindowdump xwd + +inode/chardevice +inode/blockdevice +inode/directory-locked +inode/directory +inode/fifo +inode/socket + +message/delivery-status +message/disposition-notification +message/external-body +message/http +message/s-http +message/news +message/partial +message/rfc822 eml + +model/iges igs iges +model/mesh msh mesh silo +model/vnd.dwf +model/vnd.flatland.3dml +model/vnd.gdl +model/vnd.gs-gdl +model/vnd.gtw +model/vnd.mts +model/vnd.vtu +model/vrml wrl vrml +model/x3d+vrml x3dv +model/x3d+xml x3d +model/x3d+binary x3db + +multipart/alternative +multipart/appledouble +multipart/byteranges +multipart/digest +multipart/encrypted +multipart/form-data +multipart/header-set +multipart/mixed +multipart/parallel +multipart/related +multipart/report +multipart/signed +multipart/voice-message + +text/cache-manifest appcache +text/calendar ics icz +text/css css +text/csv csv +text/directory +text/english +text/enriched +text/h323 323 +text/html html htm shtml +text/iuls uls +text/mathml mml +text/markdown md markdown +text/parityfec +text/plain asc txt text pot brf srt +text/prs.lines.tag +text/rfc822-headers +text/richtext rtx +text/rtf +text/scriptlet sct wsc +text/t140 +text/texmacs tm +text/tab-separated-values tsv +text/turtle ttl +text/uri-list +text/vcard vcf vcard +text/vnd.abc +text/vnd.curl +text/vnd.debian.copyright +text/vnd.DMClientScript +text/vnd.flatland.3dml +text/vnd.fly +text/vnd.fmi.flexstor +text/vnd.in3d.3dml +text/vnd.in3d.spot +text/vnd.IPTC.NewsML +text/vnd.IPTC.NITF +text/vnd.latex-z +text/vnd.motorola.reflex +text/vnd.ms-mediapackage +text/vnd.sun.j2me.app-descriptor jad +text/vnd.wap.si +text/vnd.wap.sl +text/vnd.wap.wml wml +text/vnd.wap.wmlscript wmls +text/x-bibtex bib +text/x-boo boo +text/x-c++hdr h++ hpp hxx hh +text/x-c++src c++ cpp cxx cc +text/x-chdr h +text/x-component htc +text/x-crontab +text/x-csh csh +text/x-csrc c +text/x-dsrc d +text/x-diff diff patch +text/x-haskell hs +text/x-java java +text/x-lilypond ly +text/x-literate-haskell lhs +text/x-makefile +text/x-moc moc +text/x-pascal p pas +text/x-pcs-gcd gcd +text/x-perl pl pm +text/x-python py +text/x-scala scala +text/x-server-parsed-html +text/x-setext etx +text/x-sfv sfv +text/x-sh sh +text/x-tcl tcl tk +text/x-tex tex ltx sty cls +text/x-vcalendar vcs + +video/3gpp 3gp +video/annodex axv +video/dl dl +video/dv dif dv +video/fli fli +video/gl gl +video/mpeg mpeg mpg mpe +video/MP2T ts +video/mp4 mp4 +video/quicktime qt mov +video/mp4v-es +video/ogg ogv +video/parityfec +video/pointer +video/webm webm +video/vnd.fvt +video/vnd.motorola.video +video/vnd.motorola.videop +video/vnd.mpegurl mxu +video/vnd.mts +video/vnd.nokia.interleaved-multimedia +video/vnd.vivo +video/x-flv flv +video/x-la-asf lsf lsx +video/x-mng mng +video/x-ms-asf asf asx +video/x-ms-wm wm +video/x-ms-wmv wmv +video/x-ms-wmx wmx +video/x-ms-wvx wvx +video/x-msvideo avi +video/x-sgi-movie movie +video/x-matroska mpv mkv + +x-conference/x-cooltalk ice + +x-epoc/x-sisx-app sisx +x-world/x-vrml vrm vrml wrl diff --git a/mke2fs.conf b/mke2fs.conf new file mode 100644 index 0000000..01e35cf --- /dev/null +++ b/mke2fs.conf @@ -0,0 +1,47 @@ +[defaults] + base_features = sparse_super,large_file,filetype,resize_inode,dir_index,ext_attr + default_mntopts = acl,user_xattr + enable_periodic_fsck = 0 + blocksize = 4096 + inode_size = 256 + inode_ratio = 16384 + +[fs_types] + ext3 = { + features = has_journal + } + ext4 = { + features = has_journal,extent,huge_file,flex_bg,metadata_csum,64bit,dir_nlink,extra_isize + inode_size = 256 + } + small = { + blocksize = 1024 + inode_size = 128 + inode_ratio = 4096 + } + floppy = { + blocksize = 1024 + inode_size = 128 + inode_ratio = 8192 + } + big = { + inode_ratio = 32768 + } + huge = { + inode_ratio = 65536 + } + news = { + inode_ratio = 4096 + } + largefile = { + inode_ratio = 1048576 + blocksize = -1 + } + largefile4 = { + inode_ratio = 4194304 + blocksize = -1 + } + hurd = { + blocksize = 4096 + inode_size = 128 + } diff --git a/modprobe.d/amd64-microcode-blacklist.conf b/modprobe.d/amd64-microcode-blacklist.conf new file mode 100644 index 0000000..1dc2c23 --- /dev/null +++ b/modprobe.d/amd64-microcode-blacklist.conf @@ -0,0 +1,3 @@ +# The microcode module attempts to apply a microcode update when +# it autoloads. This is not always safe, so we block it by default. +blacklist microcode diff --git a/modprobe.d/blacklist-ath_pci.conf b/modprobe.d/blacklist-ath_pci.conf new file mode 100644 index 0000000..bb1a85b --- /dev/null +++ b/modprobe.d/blacklist-ath_pci.conf @@ -0,0 +1,7 @@ +# For some Atheros 5K RF MACs, the madwifi driver loads buts fails to +# correctly initialize the hardware, leaving it in a state from +# which ath5k cannot recover. To prevent this condition, stop +# madwifi from loading by default. Use Jockey to select one driver +# or the other. (Ubuntu: #315056, #323830) +blacklist ath_pci + diff --git a/modprobe.d/blacklist-firewire.conf b/modprobe.d/blacklist-firewire.conf new file mode 100644 index 0000000..ae591b3 --- /dev/null +++ b/modprobe.d/blacklist-firewire.conf @@ -0,0 +1,10 @@ +# Select the legacy firewire stack over the new CONFIG_FIREWIRE one. + +blacklist ohci1394 +blacklist sbp2 +blacklist dv1394 +blacklist raw1394 +blacklist video1394 + +#blacklist firewire-ohci +#blacklist firewire-sbp2 diff --git a/modprobe.d/blacklist-framebuffer.conf b/modprobe.d/blacklist-framebuffer.conf new file mode 100644 index 0000000..59599ad --- /dev/null +++ b/modprobe.d/blacklist-framebuffer.conf @@ -0,0 +1,32 @@ +# Framebuffer drivers are generally buggy and poorly-supported, and cause +# suspend failures, kernel panics and general mayhem. For this reason we +# never load them automatically. +blacklist aty128fb +blacklist atyfb +blacklist bochs-drm +blacklist radeonfb +blacklist cirrusfb +blacklist cyber2000fb +blacklist cyblafb +blacklist gx1fb +blacklist hgafb +blacklist i810fb +blacklist intelfb +blacklist kyrofb +blacklist lxfb +blacklist matroxfb_base +blacklist neofb +blacklist nvidiafb +blacklist pm2fb +blacklist rivafb +blacklist s1d13xxxfb +blacklist savagefb +blacklist sisfb +blacklist sstfb +blacklist tdfxfb +blacklist tridentfb +#blacklist vesafb +blacklist vfb +blacklist viafb +blacklist vt8623fb +blacklist udlfb diff --git a/modprobe.d/blacklist-rare-network.conf b/modprobe.d/blacklist-rare-network.conf new file mode 100644 index 0000000..6c30188 --- /dev/null +++ b/modprobe.d/blacklist-rare-network.conf @@ -0,0 +1,22 @@ +# Many less commonly used network protocols have recently had various +# security flaws discovered. In an effort to reduce the scope of future +# vulnerability exploitations, they are being blacklisted here so that +# unprivileged users cannot use them by default. System owners can still +# either modify this file, or specifically modprobe any needed protocols. + +# ax25 +alias net-pf-3 off +# netrom +alias net-pf-6 off +# x25 +alias net-pf-9 off +# rose +alias net-pf-11 off +# decnet +alias net-pf-12 off +# econet +alias net-pf-19 off +# rds +alias net-pf-21 off +# af_802154 +alias net-pf-36 off diff --git a/modprobe.d/blacklist.conf b/modprobe.d/blacklist.conf new file mode 100644 index 0000000..706e63c --- /dev/null +++ b/modprobe.d/blacklist.conf @@ -0,0 +1,56 @@ +# This file lists those modules which we don't want to be loaded by +# alias expansion, usually so some other driver will be loaded for the +# device instead. + +# evbug is a debug tool that should be loaded explicitly +blacklist evbug + +# these drivers are very simple, the HID drivers are usually preferred +blacklist usbmouse +blacklist usbkbd + +# replaced by e100 +blacklist eepro100 + +# replaced by tulip +blacklist de4x5 + +# causes no end of confusion by creating unexpected network interfaces +blacklist eth1394 + +# snd_intel8x0m can interfere with snd_intel8x0, doesn't seem to support much +# hardware on its own (Ubuntu bug #2011, #6810) +blacklist snd_intel8x0m + +# Conflicts with dvb driver (which is better for handling this device) +blacklist snd_aw2 + +# Causes trackpads to stop working on Lenovo 11e 2nd gen (Ubuntu: #1802135) +# and Lenovo x240 to hang on boot (Ubuntu: #1802689) +blacklist i2c_i801 + +# replaced by p54pci +blacklist prism54 + +# replaced by b43 and ssb. +blacklist bcm43xx + +# most apps now use garmin usb driver directly (Ubuntu: #114565) +blacklist garmin_gps + +# replaced by asus-laptop (Ubuntu: #184721) +blacklist asus_acpi + +# low-quality, just noise when being used for sound playback, causes +# hangs at desktop session start (Ubuntu: #246969) +blacklist snd_pcsp + +# ugly and loud noise, getting on everyone's nerves; this should be done by a +# nice pulseaudio bing (Ubuntu: #77010) +blacklist pcspkr + +# EDAC driver for amd76x clashes with the agp driver preventing the aperture +# from being initialised (Ubuntu: #297750). Blacklist so that the driver +# continues to build and is installable for the few cases where its +# really needed. +blacklist amd76x_edac diff --git a/modprobe.d/intel-microcode-blacklist.conf b/modprobe.d/intel-microcode-blacklist.conf new file mode 100644 index 0000000..1dc2c23 --- /dev/null +++ b/modprobe.d/intel-microcode-blacklist.conf @@ -0,0 +1,3 @@ +# The microcode module attempts to apply a microcode update when +# it autoloads. This is not always safe, so we block it by default. +blacklist microcode diff --git a/modprobe.d/iwlwifi.conf b/modprobe.d/iwlwifi.conf new file mode 100644 index 0000000..5a83edd --- /dev/null +++ b/modprobe.d/iwlwifi.conf @@ -0,0 +1,7 @@ +# /etc/modprobe.d/iwlwifi.conf +# iwlwifi will dyamically load either iwldvm or iwlmvm depending on the +# microcode file installed on the system. When removing iwlwifi, first +# remove the iwl?vm module and then iwlwifi. +remove iwlwifi \ +(/sbin/lsmod | grep -o -e ^iwlmvm -e ^iwldvm -e ^iwlwifi | xargs /sbin/rmmod) \ +&& /sbin/modprobe -r mac80211 diff --git a/modules b/modules new file mode 100644 index 0000000..a88e208 --- /dev/null +++ b/modules @@ -0,0 +1,5 @@ +# /etc/modules: kernel modules to load at boot time. +# +# This file contains the names of kernel modules that should be loaded +# at boot time, one per line. Lines beginning with "#" are ignored. + diff --git a/modules-load.d/modules.conf b/modules-load.d/modules.conf new file mode 120000 index 0000000..464b823 --- /dev/null +++ b/modules-load.d/modules.conf @@ -0,0 +1 @@ +../modules \ No newline at end of file diff --git a/mysql/conf.d/mysql.cnf b/mysql/conf.d/mysql.cnf new file mode 100644 index 0000000..22b052d --- /dev/null +++ b/mysql/conf.d/mysql.cnf @@ -0,0 +1 @@ +[mysql] diff --git a/mysql/conf.d/mysqldump.cnf b/mysql/conf.d/mysqldump.cnf new file mode 100644 index 0000000..38310a9 --- /dev/null +++ b/mysql/conf.d/mysqldump.cnf @@ -0,0 +1,4 @@ +[mysqldump] +quick +quote-names +max_allowed_packet = 16M diff --git a/mysql/debian-start b/mysql/debian-start new file mode 100755 index 0000000..8be72ea --- /dev/null +++ b/mysql/debian-start @@ -0,0 +1,5 @@ +#!/bin/bash + +# Change to no-op as detailed in +# https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1577712 +exit 0 diff --git a/mysql/debian.cnf b/mysql/debian.cnf new file mode 100644 index 0000000..c40f9d0 --- /dev/null +++ b/mysql/debian.cnf @@ -0,0 +1,11 @@ +# Automatically generated for Debian scripts. DO NOT TOUCH! +[client] +host = localhost +user = debian-sys-maint +password = Q3cD6O5yc8IfaCo3 +socket = /var/run/mysqld/mysqld.sock +[mysql_upgrade] +host = localhost +user = debian-sys-maint +password = Q3cD6O5yc8IfaCo3 +socket = /var/run/mysqld/mysqld.sock diff --git a/mysql/my.cnf b/mysql/my.cnf new file mode 120000 index 0000000..18bea13 --- /dev/null +++ b/mysql/my.cnf @@ -0,0 +1 @@ +/etc/alternatives/my.cnf \ No newline at end of file diff --git a/mysql/my.cnf.fallback b/mysql/my.cnf.fallback new file mode 100644 index 0000000..92747d8 --- /dev/null +++ b/mysql/my.cnf.fallback @@ -0,0 +1,23 @@ +# +# The MySQL database server configuration file. +# +# You can copy this to one of: +# - "/etc/mysql/my.cnf" to set global options, +# - "~/.my.cnf" to set user-specific options. +# +# One can use all long options that the program supports. +# Run program with --help to get a list of available options and with +# --print-defaults to see which it would actually understand and use. +# +# For explanations see +# http://dev.mysql.com/doc/mysql/en/server-system-variables.html + +# This will be passed to all mysql clients +# It has been reported that passwords should be enclosed with ticks/quotes +# escpecially if they contain "#" chars... +# Remember to edit /etc/mysql/debian.cnf when changing the socket location. + +# Here is entries for some specific programs +# The following values assume you have at least 32M ram + +!includedir /etc/mysql/conf.d/ diff --git a/mysql/mysql.cnf b/mysql/mysql.cnf new file mode 100644 index 0000000..ce726b1 --- /dev/null +++ b/mysql/mysql.cnf @@ -0,0 +1,21 @@ +# +# The MySQL database server configuration file. +# +# You can copy this to one of: +# - "/etc/mysql/my.cnf" to set global options, +# - "~/.my.cnf" to set user-specific options. +# +# One can use all long options that the program supports. +# Run program with --help to get a list of available options and with +# --print-defaults to see which it would actually understand and use. +# +# For explanations see +# http://dev.mysql.com/doc/mysql/en/server-system-variables.html + +# +# * IMPORTANT: Additional settings that can override those from this file! +# The files must end with '.cnf', otherwise they'll be ignored. +# + +!includedir /etc/mysql/conf.d/ +!includedir /etc/mysql/mysql.conf.d/ diff --git a/mysql/mysql.conf.d/mysqld.cnf b/mysql/mysql.conf.d/mysqld.cnf new file mode 100644 index 0000000..b4aa9db --- /dev/null +++ b/mysql/mysql.conf.d/mysqld.cnf @@ -0,0 +1,105 @@ +# +# The MySQL database server configuration file. +# +# You can copy this to one of: +# - "/etc/mysql/my.cnf" to set global options, +# - "~/.my.cnf" to set user-specific options. +# +# One can use all long options that the program supports. +# Run program with --help to get a list of available options and with +# --print-defaults to see which it would actually understand and use. +# +# For explanations see +# http://dev.mysql.com/doc/mysql/en/server-system-variables.html + +# This will be passed to all mysql clients +# It has been reported that passwords should be enclosed with ticks/quotes +# escpecially if they contain "#" chars... +# Remember to edit /etc/mysql/debian.cnf when changing the socket location. + +# Here is entries for some specific programs +# The following values assume you have at least 32M ram + +[mysqld_safe] +socket = /var/run/mysqld/mysqld.sock +nice = 0 + +[mysqld] +# +# * Basic Settings +# +user = mysql +pid-file = /var/run/mysqld/mysqld.pid +socket = /var/run/mysqld/mysqld.sock +port = 3306 +basedir = /usr +datadir = /var/lib/mysql +tmpdir = /tmp +lc-messages-dir = /usr/share/mysql +skip-external-locking +# +# Instead of skip-networking the default is now to listen only on +# localhost which is more compatible and is not less secure. +bind-address = 127.0.0.1 +# +# * Fine Tuning +# +key_buffer_size = 16M +max_allowed_packet = 16M +thread_stack = 192K +thread_cache_size = 8 +# This replaces the startup script and checks MyISAM tables if needed +# the first time they are touched +myisam-recover-options = BACKUP +#max_connections = 100 +#table_open_cache = 64 +#thread_concurrency = 10 +# +# * Query Cache Configuration +# +query_cache_limit = 1M +query_cache_size = 16M +# +# * Logging and Replication +# +# Both location gets rotated by the cronjob. +# Be aware that this log type is a performance killer. +# As of 5.1 you can enable the log at runtime! +#general_log_file = /var/log/mysql/mysql.log +#general_log = 1 +# +# Error log - should be very few entries. +# +log_error = /var/log/mysql/error.log +# +# Here you can see queries with especially long duration +#slow_query_log = 1 +#slow_query_log_file = /var/log/mysql/mysql-slow.log +#long_query_time = 2 +#log-queries-not-using-indexes +# +# The following can be used as easy to replay backup logs or for replication. +# note: if you are setting up a replication slave, see README.Debian about +# other settings you may need to change. +#server-id = 1 +#log_bin = /var/log/mysql/mysql-bin.log +expire_logs_days = 10 +max_binlog_size = 100M +#binlog_do_db = include_database_name +#binlog_ignore_db = include_database_name +# +# * InnoDB +# +# InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/. +# Read the manual for more InnoDB related options. There are many! +# +# * Security Features +# +# Read the manual, too, if you want chroot! +# chroot = /var/lib/mysql/ +# +# For generating SSL certificates I recommend the OpenSSL GUI "tinyca". +# +# ssl-ca=/etc/mysql/cacert.pem +# ssl-cert=/etc/mysql/server-cert.pem +# ssl-key=/etc/mysql/server-key.pem diff --git a/mysql/mysql.conf.d/mysqld_safe_syslog.cnf b/mysql/mysql.conf.d/mysqld_safe_syslog.cnf new file mode 100644 index 0000000..3b0445d --- /dev/null +++ b/mysql/mysql.conf.d/mysqld_safe_syslog.cnf @@ -0,0 +1,2 @@ +[mysqld_safe] +syslog diff --git a/nanorc b/nanorc new file mode 100644 index 0000000..427801a --- /dev/null +++ b/nanorc @@ -0,0 +1,272 @@ +## Sample initialization file for GNU nano. +## +## Please note that you must have configured nano with --enable-nanorc +## for this file to be read! Also note that this file should not be in +## DOS or Mac format, and that characters specially interpreted by the +## shell should not be escaped here. +## +## To make sure an option is disabled, use "unset