Return to changelist CVS log

Up to [local] / src / etc

Impose constraints on RPKI Trust Anchors

See https://datatracker.ietf.org/doc/html/draft-snijders-constraining-rpki-trust-anchors
for more information.

Tested for a few months.

OK tb@ claudio@

#	$OpenBSD: changelist,v 1.138 2023/12/13 11:34:56 job Exp $
#
# List of files which the security script backs up and checks
# for modifications.
#
# Files prefixed with a '+' will have their checksums stored,
# not the actual files.
#

/etc/Distfile
/etc/acme-client.conf
/etc/adduser.conf
/etc/adduser.message
/etc/bgpd.conf
/etc/boot.conf
/etc/bootparams
/etc/bsd.re-config
/etc/changelist
/etc/chio.conf
/etc/crontab
/etc/csh.cshrc
/etc/csh.login
/etc/csh.logout
/etc/daily
/etc/daily.local
/etc/defaultdomain
/etc/dhcpd.conf
/etc/dhcpleased.conf
/etc/disktab
/etc/distfile
/etc/doas.conf
/etc/dvmrpd.conf
/etc/eigrpd.conf
/etc/ethers
/etc/exports
/etc/fbtab
/etc/fstab
/etc/ftpchroot
/etc/ftpusers
/etc/ftpwelcome
/etc/gettytab
/etc/group
/etc/hostapd.conf
+/etc/hostname.*
/etc/hosts
/etc/hosts.lpd
/etc/httpd.conf
/etc/ifstated.conf
+/etc/iked.conf
/etc/iked/local.pub
+/etc/iked/private/local.key
/etc/inetd.conf
/etc/installurl
+/etc/ipsec.conf
+/etc/isakmpd/isakmpd.conf
+/etc/isakmpd/isakmpd.policy
/etc/isakmpd/local.pub
+/etc/isakmpd/private/local.key
/etc/ksh.kshrc
/etc/ldapd.conf
/etc/ldpd.conf
/etc/locate.rc
/etc/login.conf
/etc/login.conf.d/*
/etc/login_ldap.conf
/etc/mail.rc
/etc/mail/aliases
/etc/mail/smtpd.conf
/etc/mail/spamd.conf
/etc/mailer.conf
/etc/man.conf
/etc/master.passwd
/etc/mixerctl.conf
/etc/mk.conf
+/etc/moduli
/etc/monthly
/etc/monthly.local
/etc/motd
/etc/mrouted.conf
/etc/mtree/4.4BSD.dist
/etc/mtree/BSD.x11.dist
/etc/mtree/special
/etc/mygate
/etc/myname
/etc/netgroup
/etc/netstart
/etc/newsyslog.conf
/etc/npppd/npppd.conf
+/etc/npppd/npppd-users
/etc/ntpd.conf
/etc/ospf6d.conf
/etc/ospfd.conf
/etc/passwd
/etc/pf.conf
/etc/pf.os
/etc/printcap
/etc/profile
/etc/protocols
+/etc/pwd.db
/etc/rad.conf
+/etc/radiusd.conf
/etc/rbootd.conf
/etc/rc
/etc/rc.conf
/etc/rc.conf.local
/etc/rc.d/rc.subr
/etc/rc.local
/etc/rc.securelevel
/etc/rc.shutdown
/etc/relayd.conf
/etc/remote
/etc/resolv.conf
/etc/ripd.conf
/etc/rpc
/etc/rpki/afrinic.constraints
/etc/rpki/afrinic.tal
/etc/rpki/apnic.constraints
/etc/rpki/apnic.tal
/etc/rpki/arin.constraints
/etc/rpki/arin.tal
/etc/rpki/lacnic.constraints
/etc/rpki/lacnic.tal
/etc/rpki/ripe.constraints
/etc/rpki/ripe.tal
/etc/rpki/skiplist
/etc/sasyncd.conf
/etc/sensorsd.conf
/etc/services
/etc/shells
+/etc/snmpd.conf
+/etc/soii.key
+/etc/spwd.db
/etc/ssh/ssh_config
+/etc/ssh/ssh_host_ecdsa_key
/etc/ssh/ssh_host_ecdsa_key.pub
+/etc/ssh/ssh_host_ed25519_key
/etc/ssh/ssh_host_ed25519_key.pub
+/etc/ssh/ssh_host_key
/etc/ssh/ssh_host_key.pub
+/etc/ssh/ssh_host_rsa_key
/etc/ssh/ssh_host_rsa_key.pub
/etc/ssh/sshd_config
/etc/ssl/cert.pem
/etc/suid_profile
/etc/sysctl.conf
/etc/syslog.conf
/etc/sysmerge.ignore
/etc/tmux.conf
/etc/ttys
/etc/unwind.conf
/etc/usermgmt.conf
/etc/vm.conf
/etc/weekly
/etc/weekly.local
/etc/wsconsctl.conf
/etc/ypldap.conf
/root/.Xdefaults
/root/.cshrc
/root/.login
/root/.profile
/root/.rhosts
/root/.shosts
/root/.ssh/authorized_keys
/root/.ssh/authorized_keys2
/var/cron/at.allow
/var/cron/at.deny
/var/cron/cron.allow
/var/cron/cron.deny
/var/cron/tabs/root
/var/db/unwind.key
+/var/nsd/etc/nsd.conf
/var/unbound/etc/unbound.conf
+/var/unbound/etc/unbound_control.key
/var/unbound/etc/unbound_control.pem
+/var/unbound/etc/unbound_server.key
/var/unbound/etc/unbound_server.pem
/var/yp/Makefile.main
/var/yp/Makefile.yp
/.cshrc
/.profile