bogdan/zira-etc
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

committing changes in /etc made by "bash almalinux-deploy.sh -d"

Browse Source 
Package changes:
This commit is contained in:
Bogdan Stoica
2022-07-05 13:42:24 +03:00
parent 019b8090a3
commit 7813b41209
24 changed files with 306 additions and 421 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
.etckeeper
View File

@@ -18,6 +18,7 @@ mkdir -p './cron.weekly'
mkdir -p './crypto-policies/policies/modules'
mkdir -p './cxs/newusers'
mkdir -p './dbus-1/session.d'
mkdir -p './debuginfod'
mkdir -p './dnf/aliases.d'
mkdir -p './dnf/modules.defaults.d'
mkdir -p './dnf/plugins/copr.d'
@@ -479,7 +480,6 @@ maybe chmod 0755 'dconf/db'
maybe chmod 0755 'dconf/db/distro.d'
maybe chmod 0755 'dconf/db/distro.d/locks'
maybe chmod 0755 'debuginfod'
maybe chmod 0644 'debuginfod/elfutils.urls'
maybe chmod 0755 'default'
maybe chmod 0644 'default/grub'
maybe chmod 0600 'default/useradd'
@@ -1027,6 +1027,7 @@ maybe chmod 0644 'ld.so.conf'
maybe chmod 0755 'ld.so.conf.d'
maybe chmod 0644 'ld.so.conf.d/bind-export-x86_64.conf'
maybe chmod 0444 'ld.so.conf.d/kernel-4.18.0-193.6.3.el8_2.x86_64.conf'
maybe chmod 0444 'ld.so.conf.d/kernel-4.18.0-372.13.1.el8_6.x86_64.conf'
maybe chmod 0444 'ld.so.conf.d/kernel-4.18.0-383.el8.x86_64.conf'
maybe chmod 0644 'ld.so.conf.d/llvm-compat-x86_64.conf'
maybe chmod 0755 'letsencrypt'
@@ -4680,8 +4681,6 @@ maybe chmod 0644 'profile.d/colorxzgrep.sh'
maybe chmod 0644 'profile.d/colorzgrep.csh'
maybe chmod 0644 'profile.d/colorzgrep.sh'
maybe chmod 0644 'profile.d/csh.local'
maybe chmod 0644 'profile.d/debuginfod.csh'
maybe chmod 0644 'profile.d/debuginfod.sh'
maybe chmod 0644 'profile.d/gawk.csh'
maybe chmod 0644 'profile.d/gawk.sh'
maybe chmod 0640 'profile.d/grc.sh'

BIN
aliases.db
View File

Binary file not shown.

1
csf/csf.pignore
View File

@@ -70,6 +70,7 @@ user:netdata
user:postgres
user:sqlgrey
user:polkitd
user:daemon
#executables
exe:/usr/lib/polkit-1/polkitd

1
debuginfod/elfutils.urls
View File

@@ -1 +0,0 @@
https://debuginfod.centos.org/

1
ld.so.conf.d/kernel-4.18.0-372.13.1.el8_6.x86_64.conf Normal file
View File

@@ -0,0 +1 @@
# Placeholder file, no vDSO hwcap entries used in this kernel.

2
modprobe.d/firewalld-sysctls.conf
View File

@@ -1 +1 @@
install nf_conntrack /sbin/modprobe --ignore-install nf_conntrack $CMDLINE_OPTS && /sbin/sysctl --quiet --pattern 'net[.]netfilter[.]nf_conntrack.*' --system
install nf_conntrack /sbin/modprobe --ignore-install nf_conntrack $CMDLINE_OPTS && /usr/sbin/sysctl --quiet --pattern 'net[.]netfilter[.]nf_conntrack.*' --system

1
pam.d/systemd-user
View File

@@ -2,7 +2,6 @@
#
# Used by systemd --user instances.
account sufficient pam_unix.so no_pass_expiry
account include system-auth
session required pam_selinux.so close

BIN
pki/ca-trust/extracted/java/cacerts
View File

Binary file not shown.

16
profile.d/debuginfod.csh
View File

@@ -1,16 +0,0 @@
# $HOME/.login* or similar files may first set $DEBUGINFOD_URLS.
# If $DEBUGINFOD_URLS is not set there, we set it from system *.url files.
# $HOME/.*rc or similar files may then amend $DEBUGINFOD_URLS.
# See also [man debuginfod-client-config] for other environment variables
# such as $DEBUGINFOD_MAXSIZE, $DEBUGINFOD_MAXTIME, $DEBUGINFOD_PROGRESS.
if (! $?DEBUGINFOD_URLS) then
set prefix="/usr"
set DEBUGINFOD_URLS=`sh -c 'cat "$0"/*.urls 2>/dev/null; :' "/etc/debuginfod" | tr '\n' ' '`
if ( "$DEBUGINFOD_URLS" != "" ) then
setenv DEBUGINFOD_URLS "$DEBUGINFOD_URLS"
else
unset DEBUGINFOD_URLS
endif
unset prefix
endif

12
profile.d/debuginfod.sh
View File

@@ -1,12 +0,0 @@
# $HOME/.profile* or similar files may first set $DEBUGINFOD_URLS.
# If $DEBUGINFOD_URLS is not set there, we set it from system *.url files.
# $HOME/.*rc or similar files may then amend $DEBUGINFOD_URLS.
# See also [man debuginfod-client-config] for other environment variables
# such as $DEBUGINFOD_MAXSIZE, $DEBUGINFOD_MAXTIME, $DEBUGINFOD_PROGRESS.
if [ -z "$DEBUGINFOD_URLS" ]; then
prefix="/usr"
DEBUGINFOD_URLS=$(cat "/etc/debuginfod"/*.urls 2>/dev/null | tr '\n' ' ')
[ -n "$DEBUGINFOD_URLS" ] && export DEBUGINFOD_URLS || unset DEBUGINFOD_URLS
unset prefix
fi

2
profile.d/which2.sh
View File

@@ -20,7 +20,7 @@ bash|sh)
;;
esac
function which {
which () {
(alias; eval ${which_declare}) | /usr/bin/which --tty-only --read-alias --read-functions --show-tilde --show-dot $@
}

2
selinux/targeted/.policy.sha512
View File

@@ -1 +1 @@
d4fd17421900e5952bfdc4d465cc49f7947b18125eaffc27862e0024c386b792c8da1f3e7c1697ab9b923e4d392afcf01e7f7d07f65480c7c7fdc051ccc2c0e0
3529f6e114cca0bd7360d6774096502304ff52b0724a6a58a28bfaa1ffd7d9623f12eb993d8cb0cc0c8116eb3e6a460deb1ce019825989a52ba1769324433777

7
selinux/targeted/contexts/files/file_contexts
View File

@@ -2161,7 +2161,6 @@
/var/cache/cracklib(/.*)? system_u:object_r:crack_db_t:s0
/var/cache/ddclient(/.*)? system_u:object_r:ddclient_var_t:s0
/var/cache/foomatic(/.*)? system_u:object_r:cupsd_rw_etc_t:s0
/var/cache/insights(/.*)? system_u:object_r:insights_client_cache_t:s0
/var/cache/ipmiseld(/.*)? system_u:object_r:freeipmi_var_cache_t:s0
/var/cache/ldconfig(/.*)? system_u:object_r:ldconfig_cache_t:s0
/var/cache/lighttpd(/.*)? system_u:object_r:httpd_cache_t:s0
@@ -5277,7 +5276,6 @@
/usr/libexec/news/inndf -- system_u:object_r:innd_exec_t:s0
/usr/libexec/news/nnrpd -- system_u:object_r:innd_exec_t:s0
/usr/libexec/news/rnews -- system_u:object_r:innd_exec_t:s0
/usr/libexec/vdsm/vdsmd -- system_u:object_r:virtd_exec_t:s0
/usr/sbin/audisp-remote -- system_u:object_r:audisp_remote_exec_t:s0
/usr/sbin/avahi-autoipd -- system_u:object_r:avahi_exec_t:s0
/usr/sbin/clamav-milter -- system_u:object_r:antivirus_exec_t:s0
@@ -5544,7 +5542,6 @@
/usr/libexec/rtkit-daemon -- system_u:object_r:rtkit_daemon_exec_t:s0
/usr/libexec/tangd-keygen -- system_u:object_r:tangd_exec_t:s0
/usr/libexec/tangd-update -- system_u:object_r:tangd_exec_t:s0
/usr/libexec/vdsm/respawn -- system_u:object_r:virtd_exec_t:s0
/usr/sbin/dnssec-triggerd -- system_u:object_r:dnssec_trigger_exec_t:s0
/usr/sbin/init_repository -- system_u:object_r:pegasus_exec_t:s0
/usr/sbin/ipvsadm-restore -- system_u:object_r:iptables_exec_t:s0
@@ -5833,11 +5830,9 @@
/usr/libexec/pcp/lib/pmproxy -- system_u:object_r:pcp_pmproxy_initrc_exec_t:s0
/usr/libexec/postfix/cleanup -- system_u:object_r:postfix_cleanup_exec_t:s0
/usr/libexec/postfix/virtual -- system_u:object_r:postfix_virtual_exec_t:s0
/usr/libexec/samba/rpcd_lsad -- system_u:object_r:winbind_rpcd_exec_t:s0
/usr/libexec/telepathy-rakia -- system_u:object_r:telepathy_sofiasip_exec_t:s0
/usr/libexec/telepathy-salut -- system_u:object_r:telepathy_salut_exec_t:s0
/usr/libexec/udisks2/udisksd -- system_u:object_r:devicekit_disk_exec_t:s0
/usr/libexec/vdsm/supervdsmd -- system_u:object_r:virtd_exec_t:s0
/usr/sbin/audispd-zos-remote -- system_u:object_r:zos_remote_exec_t:s0
/usr/sbin/console-kit-daemon -- system_u:object_r:consolekit_exec_t:s0
/usr/sbin/nm-system-settings -- system_u:object_r:NetworkManager_exec_t:s0
@@ -6030,7 +6025,6 @@
/usr/libexec/sssd/selinux_child -- system_u:object_r:sssd_selinux_manager_exec_t:s0
/usr/libexec/telepathy-sofiasip -- system_u:object_r:telepathy_sofiasip_exec_t:s0
/usr/libexec/telepathy-sunshine -- system_u:object_r:telepathy_sunshine_exec_t:s0
/usr/libexec/vdsm/daemonAdapter -- system_u:object_r:virtd_exec_t:s0
/usr/sbin/insmod_ksymoops_clean -- system_u:object_r:bin_t:s0
/usr/sbin/zabbix_server_sqlite3 -- system_u:object_r:zabbix_exec_t:s0
/usr/share/ajaxterm/ajaxterm\.py -- system_u:object_r:ajaxterm_exec_t:s0
@@ -6074,7 +6068,6 @@
/usr/libexec/openssh/sftp-server -- system_u:object_r:bin_t:s0
/usr/libexec/openssh/ssh-keysign -- system_u:object_r:ssh_keysign_exec_t:s0
/usr/libexec/openssh/sshd-keygen -- system_u:object_r:sshd_keygen_exec_t:s0
/usr/libexec/samba/samba-dcerpcd -- system_u:object_r:winbind_rpcd_exec_t:s0
/usr/libexec/squid/cache_swap\.sh -- system_u:object_r:squid_exec_t:s0
/usr/libexec/telepathy-butterfly -- system_u:object_r:telepathy_msn_exec_t:s0
/usr/sbin/abrt-install-ccpp-hook -- system_u:object_r:abrt_exec_t:s0

BIN
selinux/targeted/contexts/files/file_contexts.bin
View File

Binary file not shown.

BIN
selinux/targeted/policy/policy.31
View File

Binary file not shown.

18
sgml/catalog
View File

@@ -1,13 +1,13 @@
CATALOG "/etc/sgml/sgml-docbook-4.1.cat"
CATALOG "/etc/sgml/sgml-docbook-3.0.cat"
CATALOG "/etc/sgml/sgml-docbook-4.0.cat"
CATALOG "/etc/sgml/sgml-docbook-4.2.cat"
CATALOG "/etc/sgml/sgml-docbook-4.3.cat"
CATALOG "/etc/sgml/sgml-docbook-4.4.cat"
CATALOG "/etc/sgml/sgml-docbook-4.5.cat"
CATALOG "/etc/sgml/sgml-docbook-3.0.cat"
CATALOG "/etc/sgml/sgml-docbook-4.2.cat"
CATALOG "/etc/sgml/sgml-docbook-3.1.cat"
CATALOG "/etc/sgml/xml-docbook-4.1.2.cat"
CATALOG "/etc/sgml/xml-docbook-4.2.cat"
CATALOG "/etc/sgml/xml-docbook-4.4.cat"
CATALOG "/etc/sgml/xml-docbook-4.5.cat"
CATALOG "/etc/sgml/sgml-docbook-4.4.cat"
CATALOG "/etc/sgml/sgml-docbook-4.1.cat"
CATALOG "/etc/sgml/sgml-docbook-4.3.cat"
CATALOG "/etc/sgml/xml-docbook-4.3.cat"
CATALOG "/etc/sgml/xml-docbook-4.1.2.cat"
CATALOG "/etc/sgml/xml-docbook-4.4.cat"
CATALOG "/etc/sgml/xml-docbook-4.2.cat"
CATALOG "/etc/sgml/xml-docbook-4.5.cat"

2
sgml/sgml-docbook-3.1.cat
View File

@@ -1,2 +1,2 @@
CATALOG "/usr/share/sgml/docbook/sgml-dtd-3.1/catalog"
CATALOG "/usr/share/sgml/sgml-iso-entities-8879.1986/catalog"
CATALOG "/usr/share/sgml/docbook/sgml-dtd-3.1/catalog"

2
sgml/sgml-docbook-4.0.cat
View File

@@ -1,2 +1,2 @@
CATALOG "/usr/share/sgml/sgml-iso-entities-8879.1986/catalog"
CATALOG "/usr/share/sgml/docbook/sgml-dtd-4.0/catalog"
CATALOG "/usr/share/sgml/sgml-iso-entities-8879.1986/catalog"

2
sgml/sgml-docbook-4.2.cat
View File

@@ -1,2 +1,2 @@
CATALOG "/usr/share/sgml/docbook/sgml-dtd-4.2/catalog"
CATALOG "/usr/share/sgml/sgml-iso-entities-8879.1986/catalog"
CATALOG "/usr/share/sgml/docbook/sgml-dtd-4.2/catalog"

2
sgml/sgml-docbook-4.5.cat
View File

@@ -1,2 +1,2 @@
CATALOG "/usr/share/sgml/docbook/sgml-dtd-4.5/catalog"
CATALOG "/usr/share/sgml/sgml-iso-entities-8879.1986/catalog"
CATALOG "/usr/share/sgml/docbook/sgml-dtd-4.5/catalog"

14
sysconfig/network-scripts/ifup-routes
View File

@@ -2,8 +2,6 @@
#
# adds static routes which go through device $1
. /etc/sysconfig/network-scripts/network-functions
if [ -z "$1" ]; then
echo $"usage: ifup-routes <net-device> [<nickname>]"
exit 1
@@ -21,12 +19,7 @@ handle_file () {
line="$line via $(eval echo '$'GATEWAY$routenum)"
fi
line="$line dev $2"
/sbin/ip route add $line || {
net_log $"Failed to add route ${line}, using ip route replace instead." warning
/sbin/ip route replace $line
}
/sbin/ip route add $line
routenum=$(($routenum+1))
done
}
@@ -42,11 +35,6 @@ handle_ip_file() {
{ cat "$file" ; echo ; } | while read line; do
if [[ ! "$line" =~ $MATCH ]]; then
/sbin/ip $proto $type add $line
if [ $? != 0 ] && [ "$type" == "route" ] ; then
net_log $"Failed to add route ${line}, using ip route replace instead." warning
/sbin/ip $proto route replace $line
fi
fi
done
}

2
sysconfig/rngd
View File

@@ -1,3 +1,3 @@
# Optional arguments passed to rngd. See rngd(8) and
# https://bugzilla.redhat.com/show_bug.cgi?id=1252175#c21
RNGD_ARGS="--fill-watermark=0 -x pkcs11 -x nist -D daemon:daemon"
RNGD_ARGS="--fill-watermark=0 -x pkcs11 -x nist"

69
vmware-tools/tools.conf.example
View File

@@ -1,4 +1,4 @@
# Copyright (c) 2019-2022 VMware, Inc. All rights reserved.
# Copyright (c) 2019-2021 VMware, Inc. All rights reserved.
# "CAUTION: tools.conf is highly syntax sensitive file. Use extreme caution
# while editing it. If modified, it is automatically re-loaded by
@@ -245,44 +245,6 @@
# whether to include reserved space in diskInfo space metrics on Linux
#diskinfo-include-reserved=false
[globalconf]
# The GlobalConf feature provides an ability for the vSphere administrators
# to distribute a 'VMware Tools Configuration File' (tools.conf) via the
# GuestStore for multiple VMs at scale.
# Defines the configuration to enable/disable the GlobalConf module.
# Set to true to enable the module.
# Set to false to disable the module. Default false.
#enabled=false
# Defines a custom GlobalConf poll interval (in seconds).
# Default 3600 seconds. Minimum 1800 seconds.
#poll-interval=3600
# Defines the global configuration resource in GuestStore.
# Windows guests
#resource=/vmware/configurations/vmtools/windows/tools.conf
#
# Linux guests
#resource=/vmware/configurations/vmtools/linux/tools.conf
[componentmgr]
# This plugin manages the known and enabled components add/remove status.
# The plugin polls at regular interval and triggers action add/remove for
# all the known and enabled components in the componentMgr plugin.
# Default and minimum polling interval in seconds (0 => polling disabled)
#poll-interval=180
# Comma separated list of components managed by the plugin. If not specified,
# default value is all, which means all components are enabled by default.
# A special value of none means no component, which is equivalent to disabling
# the plugin completely. Value is parsed left to right and parsing stops at
# first occurrence of all or none or end of line.
#included=all
[appinfo]
# This plugin collects info about running applications in guest OS.
@@ -297,35 +259,6 @@
# version info, otherwise native Win32 API is used.
#useWMI=false
# Whether to remove the duplicate applications information in the
# guestinfo variable.
#remove-duplicates=true
[containerinfo]
# This plugin collects info about running containers in guest OS.
# User-defined poll interval in seconds. Set to 0 to disable the plugin.
#poll-interval=21600
# Maximum number of containers to be retrieved per namespace.
#max-containers=256
# Whether to remove the duplicate containers information in the
# guestinfo variable.
#remove-duplicates=true
# Unix socket to use to communicate with the docker daemon.
#docker-unix-socket=/var/run/docker.sock
# The unix socket to connect to communicate with containerd grpc server
# for retrieving the list of running containers.
#containerd-unix-socket=/run/containerd/containerd.sock
# List of namespaces to be queried for the running containers.
# The value for this key is a comman separated list.
#allowed-namespaces=moby,k8s.io,default
[servicediscovery]
# This plugin provides admins with additional info for better VM management.