1.\" $OpenBSD: changelist.5,v 1.5 2009/05/18 19:37:47 schwarze Exp $ 2.\" 3.\" Copyright (c) 2003 Jason McIntyre <jmc@openbsd.org> 4.\" 5.\" Permission to use, copy, modify, and distribute this software for any 6.\" purpose with or without fee is hereby granted, provided that the above 7.\" copyright notice and this permission notice appear in all copies. 8.\" 9.\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 10.\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 11.\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 12.\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 13.\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 14.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 15.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 16.\" 17.Dd $Mdocdate: May 18 2009 $ 18.Dt CHANGELIST 5 19.Os 20.Sh NAME 21.Nm changelist 22.Nd list of backup files 23.Sh SYNOPSIS 24.Nm /etc/changelist 25.Sh DESCRIPTION 26The 27.Pa /etc/changelist 28file is a simple text file containing the names of files to be backed up 29and checked for modification by the system security script, 30.Xr security 8 . 31It is checked daily by the 32.Pa /etc/daily 33script. 34See 35.Xr daily 8 36for further details. 37.Pp 38Each line of the file contains the name of a file, 39specified by its absolute pathname, 40one per line. 41By default, configuration files in 42.Pa /etc , 43.Pa /root , 44and 45.Pa /var 46are added during system install. 47Administrators may add additional files at their discretion. 48Shell globbing is supported in pathnames. 49.Pp 50Backup files are held in the directory 51.Pa /var/backups . 52A backup of the current version of a file is kept in this directory, marked 53.Qq current . 54When the file is altered, the old version is marked as 55.Qq backup 56and the new version becomes 57.Qq current . 58.Pp 59For example, 60the system shell database, 61.Pa /etc/shells , 62is held as 63.Pa /var/backups/etc_shells.current . 64When this file is modified, it is renamed to 65.Pa /var/backups/etc_shells.backup 66and the new version becomes 67.Pa /var/backups/etc_shells.current . 68Thereafter, these files are rotated. 69.Pp 70Diffs are mailed to the root administrator, in unified 71.Xr diff 1 72format, via 73.Xr daily 8 , 74in the following format: 75.Bd -unfilled -offset indent 76===== 77/etc/shells diffs (-OLD +NEW) 78===== 79.Ed 80.Pp 81Files in 82.Pa /etc/changelist 83beginning with a 84.Sq + 85character 86.Pq generally non-text files 87are stored as 88.Xr md5 1 89checksums. 90Results are mailed in the following format: 91.Bd -unfilled -offset indent 92====== 93/etc/ssh/ssh_host_key MD5 checksums 94====== 95OLD: 96NEW: 97.Ed 98.Pp 99Lines beginning with the comment character 100.Pq Sq # , 101blank lines, 102and non-existent files are all silently ignored. 103.\" .Sh ENVIRONMENT 104.Sh FILES 105.Bl -tag -width /etc/changelist -compact 106.It Pa /etc/changelist 107Default changelist. 108.It Pa /etc/daily 109Maintenance script which runs 110.Xr security 8 . 111.It Pa /etc/security 112Shell script which reads 113.Pa /etc/changelist . 114.It /var/backups/ 115Directory containing file backups. 116.El 117.Sh SEE ALSO 118.Xr diff 1 , 119.Xr md5 1 , 120.Xr daily 8 , 121.Xr security 8 122.Sh HISTORY 123The 124.Nm 125manual page first appeared in 126.Ox 3.5 . 127.Sh CAVEATS 128Anyone with the privileges to alter system configuration files 129could also alter the backup files in 130.Pa /var/backups . 131It is important that this directory be owned by root:wheel 132and have permissions 0700 set. 133.Pp 134Removal of the 135.Pa /etc/changelist 136file itself could cause confusion. 137.Pp 138.Nm 139cannot warn about files being added to the system, although 140.Xr security 8 141will pick up on any files listed in 142.Pa /etc/changelist 143being added or deleted. 144Removals are only noticed for files listed explicitly, 145but not for files matched by globbing. 146.Pp 147If you hose your system configuration files, 148you just might be able to find the information you need in 149.Pa /var/backups . 150This is not a CAVEAT, but we had to let you know somehow! 151