committing changes in /etc after apt run

author Frank Brehm <frank@brehm-online.com>

Mon, 26 Feb 2018 11:30:17 +0000 (12:30 +0100)

committer Frank Brehm <frank@brehm-online.com>

Mon, 26 Feb 2018 11:30:17 +0000 (12:30 +0100)
author Frank Brehm <frank@brehm-online.com>
Mon, 26 Feb 2018 11:30:17 +0000 (12:30 +0100)
committer Frank Brehm <frank@brehm-online.com>
Mon, 26 Feb 2018 11:30:17 +0000 (12:30 +0100)
diff --git a/.etckeeper b/.etckeeper

index 18611d211a82d9d6f04f7e18b84b9bb1030d83cf..4a7527efc6e2817047445257727c0bd510a3ae77 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -75,10 +75,13 @@ maybe chmod 0755 'apm'
  maybe chmod 0755 'apm/event.d'
  maybe chmod 0755 'apm/event.d/20hdparm'
  maybe chmod 0755 'apparmor.d'
+maybe chmod 0755 'apparmor.d/force-complain'
  maybe chmod 0755 'apparmor.d/local'
  maybe chmod 0644 'apparmor.d/local/usr.bin.man'
+maybe chmod 0644 'apparmor.d/local/usr.sbin.chronyd'
  maybe chmod 0644 'apparmor.d/local/usr.sbin.haveged'
  maybe chmod 0644 'apparmor.d/usr.bin.man'
+maybe chmod 0644 'apparmor.d/usr.sbin.chronyd'
  maybe chmod 0644 'apparmor.d/usr.sbin.haveged'
  maybe chmod 0755 'apt'
  maybe chmod 0644 'apt/SALTSTACK-GPG-KEY.pub'
@@ -228,6 +231,7 @@ maybe chmod 0755 'dhcp'
  maybe chmod 0644 'dhcp/debug'
  maybe chmod 0755 'dhcp/dhclient-enter-hooks.d'
  maybe chmod 0755 'dhcp/dhclient-exit-hooks.d'
+maybe chmod 0644 'dhcp/dhclient-exit-hooks.d/chrony'
  maybe chmod 0644 'dhcp/dhclient-exit-hooks.d/rfc3442-classless-routes'
  maybe chmod 0644 'dhcp/dhclient-exit-hooks.d/timesyncd'
  maybe chmod 0644 'dhcp/dhclient.conf'
@@ -642,6 +646,7 @@ maybe chmod 0440 'sudoers.d/README'
  maybe chmod 0644 'sysctl.conf'
  maybe chmod 0755 'sysctl.d'
  maybe chmod 0644 'sysctl.d/README.sysctl'
+maybe chmod 0644 'sysctl.d/protect-links.conf'
  maybe chmod 0755 'systemd'
  maybe chmod 0644 'systemd/journald.conf'
  maybe chmod 0644 'systemd/logind.conf'
diff --git a/apparmor.d/force-complain/usr.sbin.chronyd b/apparmor.d/force-complain/usr.sbin.chronyd

new file mode 120000 (symlink)

index 0000000..46fe87e
--- /dev/null
+++ b/apparmor.d/force-complain/usr.sbin.chronyd
@@ -0,0 +1 @@
+/etc/apparmor.d/usr.sbin.chronyd
+\ No newline at end of file
diff --git a/apparmor.d/local/usr.sbin.chronyd b/apparmor.d/local/usr.sbin.chronyd

new file mode 100644 (file)

index 0000000..e69de29
diff --git a/apparmor.d/usr.bin.man b/apparmor.d/usr.bin.man

index 8619911dfe7beca30423a10f08e0c9ef55febc50..d604a9cbe5f386768577c53f20fc6c9d1988d9c6 100644 (file)
--- a/apparmor.d/usr.bin.man
+++ b/apparmor.d/usr.bin.man
@@ -9,25 +9,25 @@
    # include the programs that actually parse input data in a non-trivial
    # way, not wrappers such as groff and nroff, since the latter would need a
    # broader profile.
-  /usr/bin/eqn rmCx -> groff,
-  /usr/bin/grap rmCx -> groff,
-  /usr/bin/pic rmCx -> groff,
-  /usr/bin/preconv rmCx -> groff,
-  /usr/bin/refer rmCx -> groff,
-  /usr/bin/tbl rmCx -> groff,
-  /usr/bin/troff rmCx -> groff,
-  /usr/bin/vgrind rmCx -> groff,
+  /usr/bin/eqn rmCx -> &man_groff,
+  /usr/bin/grap rmCx -> &man_groff,
+  /usr/bin/pic rmCx -> &man_groff,
+  /usr/bin/preconv rmCx -> &man_groff,
+  /usr/bin/refer rmCx -> &man_groff,
+  /usr/bin/tbl rmCx -> &man_groff,
+  /usr/bin/troff rmCx -> &man_groff,
+  /usr/bin/vgrind rmCx -> &man_groff,
  
    # Similarly, use a special profile when man calls decompressors and other
    # simple filters.
-  /bin/bzip2 rmCx -> filter,
-  /bin/gzip rmCx -> filter,
-  /usr/bin/col rmCx -> filter,
-  /usr/bin/compress rmCx -> filter,
-  /usr/bin/iconv rmCx -> filter,
-  /usr/bin/lzip.lzip rmCx -> filter,
-  /usr/bin/tr rmCx -> filter,
-  /usr/bin/xz rmCx -> filter,
+  /bin/bzip2 rmCx -> &man_filter,
+  /bin/gzip rmCx -> &man_filter,
+  /usr/bin/col rmCx -> &man_filter,
+  /usr/bin/compress rmCx -> &man_filter,
+  /usr/bin/iconv rmCx -> &man_filter,
+  /usr/bin/lzip.lzip rmCx -> &man_filter,
+  /usr/bin/tr rmCx -> &man_filter,
+  /usr/bin/xz rmCx -> &man_filter,
  
    # Allow basically anything in terms of file system access, subject to DAC.
    # The purpose of this profile isn't to confine man itself (that might be
@@ -38,46 +38,46 @@
    capability setuid,
    capability setgid,
  
-  profile groff {
-    #include <abstractions/base>
-    # Recent kernels revalidate open FDs, and there are often some still
-    # open on TTYs.  This is temporary until man learns to close irrelevant
-    # open FDs before execve.
-    #include <abstractions/consoles>
-    # man always runs its groff pipeline with the input file open on stdin,
-    # so we can skip <abstractions/user-manpages>.
+  # Site-specific additions and overrides.  See local/README for details.
+  #include <local/usr.bin.man>
+}
  
-    /usr/bin/eqn rm,
-    /usr/bin/grap rm,
-    /usr/bin/pic rm,
-    /usr/bin/preconv rm,
-    /usr/bin/refer rm,
-    /usr/bin/tbl rm,
-    /usr/bin/troff rm,
-    /usr/bin/vgrind rm,
+profile man_groff {
+  #include <abstractions/base>
+  # Recent kernels revalidate open FDs, and there are often some still
+  # open on TTYs.  This is temporary until man learns to close irrelevant
+  # open FDs before execve.
+  #include <abstractions/consoles>
+  # man always runs its groff pipeline with the input file open on stdin,
+  # so we can skip <abstractions/user-manpages>.
  
-    /etc/groff/** r,
-    /usr/lib/groff/site-tmac/** r,
-    /usr/share/groff/** r,
-  }
+  /usr/bin/eqn rm,
+  /usr/bin/grap rm,
+  /usr/bin/pic rm,
+  /usr/bin/preconv rm,
+  /usr/bin/refer rm,
+  /usr/bin/tbl rm,
+  /usr/bin/troff rm,
+  /usr/bin/vgrind rm,
  
-  profile filter {
-    #include <abstractions/base>
-    # Recent kernels revalidate open FDs, and there are often some still
-    # open on TTYs.  This is temporary until man learns to close irrelevant
-    # open FDs before execve.
-    #include <abstractions/consoles>
+  /etc/groff/** r,
+  /usr/lib/groff/site-tmac/** r,
+  /usr/share/groff/** r,
+}
  
-    /bin/bzip2 rm,
-    /bin/gzip rm,
-    /usr/bin/col rm,
-    /usr/bin/compress rm,
-    /usr/bin/iconv rm,
-    /usr/bin/lzip.lzip rm,
-    /usr/bin/tr rm,
-    /usr/bin/xz rm,
-  }
+profile man_filter {
+  #include <abstractions/base>
+  # Recent kernels revalidate open FDs, and there are often some still
+  # open on TTYs.  This is temporary until man learns to close irrelevant
+  # open FDs before execve.
+  #include <abstractions/consoles>
  
-  # Site-specific additions and overrides.  See local/README for details.
-  #include <local/usr.bin.man>
+  /bin/bzip2 rm,
+  /bin/gzip rm,
+  /usr/bin/col rm,
+  /usr/bin/compress rm,
+  /usr/bin/iconv rm,
+  /usr/bin/lzip.lzip rm,
+  /usr/bin/tr rm,
+  /usr/bin/xz rm,
  }
diff --git a/apparmor.d/usr.sbin.chronyd b/apparmor.d/usr.sbin.chronyd

new file mode 100644 (file)

index 0000000..277ef83
--- /dev/null
+++ b/apparmor.d/usr.sbin.chronyd
@@ -0,0 +1,49 @@
+# Last Modified: Sat Jan 20 10:45:05 2018
+#include <tunables/global>
+#include <tunables/sys>
+
+/usr/sbin/chronyd (attach_disconnected) {
+  #include <abstractions/base>
+  #include <abstractions/nameservice>
+
+  capability sys_time,
+  capability net_bind_service,
+  capability setuid,
+  capability setgid,
+  capability sys_nice,
+  capability sys_resource,
+  # for /run/chrony to be created
+  capability chown,
+
+  /usr/sbin/chronyd mr,
+
+  /etc/chrony/{,**} r,
+  /{,var/}run/chronyd.pid w,
+  /{,var/}run/chrony/{,*} rw,
+  /var/lib/chrony/{,*} r,
+  /var/lib/chrony/* w,
+  /var/log/chrony/{,*} r,
+  /var/log/chrony/* w,
+
+  # Using the “tempcomp” directive gives chronyd the ability to improve
+  # the stability and accuracy of the clock by compensating the temperature
+  # changes measured by a sensor close to the oscillator.
+  @{sys}/class/hwmon/hwmon[0-9]*/temp[0-9]*_input r,
+
+  # rtc
+  /etc/adjtime r,
+  /dev/rtc{,[0-9]*} r,
+
+  # gps devices
+  /dev/pps[0-9]* r,
+  /dev/ptp[0-9]* r,
+
+  # For use with clocks that report via shared memory (e.g. gpsd),
+  # you may need to give ntpd access to all of shared memory, though
+  # this can be considered dangerous. See https://launchpad.net/bugs/722815
+  # for details. To enable, add this to local/usr.sbin.chronyd:
+  #     capability ipc_owner,
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/usr.sbin.chronyd>
+}
diff --git a/apt/apt.conf.d/01autoremove-kernels b/apt/apt.conf.d/01autoremove-kernels

index 10b290b4270bc0b963a543fb56b77cfed71d5c2a..1fd7185d408656e1d54641cc90faba02381767d8 100644 (file)
--- a/apt/apt.conf.d/01autoremove-kernels
+++ b/apt/apt.conf.d/01autoremove-kernels
@@ -27,28 +27,22 @@ APT::NeverAutoRemove
  /* Debug information:
  # dpkg list:
  rc  linux-image-4.11.0-1-amd64                4.11.6-1                       amd64        Linux 4.11 for 64-bit PCs
-ii  linux-image-4.12.0-1-amd64                4.12.6-1                       amd64        Linux 4.12 for 64-bit PCs
-ii  linux-image-4.13.0-1-amd64                4.13.13-1                      amd64        Linux 4.13 for 64-bit PCs
  ii  linux-image-4.14.0-2-amd64                4.14.7-1                       amd64        Linux 4.14 for 64-bit PCs
-iF  linux-image-4.14.0-3-amd64                4.14.13-1                      amd64        Linux 4.14 for 64-bit PCs
+iF  linux-image-4.14.0-3-amd64                4.14.17-1                      amd64        Linux 4.14 for 64-bit PCs
  rc  linux-image-4.9.0-3-amd64                 4.9.30-2+deb9u2                amd64        Linux 4.9 for 64-bit PCs
-iU  linux-image-amd64                         4.14+89                        amd64        Linux for 64-bit PCs (meta-package)
+ii  linux-image-amd64                         4.14+89                        amd64        Linux for 64-bit PCs (meta-package)
  # list of installed kernel packages:
-4.12.0-1-amd64 4.12.6-1
-4.13.0-1-amd64 4.13.13-1
  4.14.0-2-amd64 4.14.7-1
-4.14.0-3-amd64 4.14.13-1
+4.14.0-3-amd64 4.14.17-1
  # list of different kernel versions:
-4.14.13-1
+4.14.17-1
  4.14.7-1
-4.13.13-1
-4.12.6-1
-# Installing kernel: 4.14.13-1 (4.14.0-3-amd64)
-# Running kernel: 4.14.7-1 (4.14.0-2-amd64)
-# Last kernel: 4.14.13-1
+# Installing kernel: 4.14.17-1 (4.14.0-3-amd64)
+# Running kernel: 4.14.17-1 (4.14.0-3-amd64)
+# Last kernel: 4.14.17-1
  # Previous kernel: 4.14.7-1
  # Kernel versions list to keep:
-4.14.13-1
+4.14.17-1
  4.14.7-1
  # Kernel packages (version part) to protect:
  4\.14\.0-2-amd64
diff --git a/bash.bashrc b/bash.bashrc

index 54687b1d68f858e82e7d061b6fa5241d803b0fab..7fabe82a42b2c95cd57afe703a36572f08c31507 100644 (file)
--- a/bash.bashrc
+++ b/bash.bashrc
@@ -16,7 +16,10 @@ if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; then
  fi
  
  # set a fancy prompt (non-color, overwrite the one in /etc/profile)
-PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
+# but only if not SUDOing and have SUDO_PS1 set; then assume smart user.
+if ! [ -n "${SUDO_USER}" -a -n "${SUDO_PS1}" ]; then
+  PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
+fi
  
  # Commented out, don't overwrite xterm -T "title" -n "icontitle" by default.
  # If this is an xterm set the title to user@host:dir
diff --git a/console-setup/cached_UTF-8_del.kmap.gz b/console-setup/cached_UTF-8_del.kmap.gz

index 631a40afa55ad29406bc29ecdc20f9bced599f5f..ca76dcc7c3720ff513fb6beda44634e2b975a5d0 100644 (file)

Binary files a/console-setup/cached_UTF-8_del.kmap.gz and b/console-setup/cached_UTF-8_del.kmap.gz differ
diff --git a/console-setup/cached_setup_keyboard.sh b/console-setup/cached_setup_keyboard.sh

index 87e283be3d93ba49cc22247552ab3376e0757b22..30b46c1b76026e66d7564d5693b2e08af9ae421b 100755 (executable)
--- a/console-setup/cached_setup_keyboard.sh
+++ b/console-setup/cached_setup_keyboard.sh
@@ -10,4 +10,4 @@ kbd_mode '-u' < '/dev/tty3'
  kbd_mode '-u' < '/dev/tty4' 
  kbd_mode '-u' < '/dev/tty5' 
  kbd_mode '-u' < '/dev/tty6' 
-loadkeys '/tmp/tmpkbd.PupXh4' > '/dev/null' 
+loadkeys '/etc/console-setup/cached_UTF-8_del.kmap.gz' > '/dev/null' 
diff --git a/default/chrony b/default/chrony

index 929dea0792aa0bd73073e5995f966690fc140fd3..ae79e8a6d3111a0af9c344ccd4dee926c56a04fd 100644 (file)
--- a/default/chrony
+++ b/default/chrony
@@ -1,5 +1,6 @@
-# This is a configuration file for /etc/init.d/chrony; it allows you to
-# pass various options to the chrony daemon without editing the init script.
+# This is a configuration file for /etc/init.d/chrony and
+# /lib/systemd/system/chrony.service; it allows you to pass various options to
+# the chrony daemon without editing the init script or service file.
  
  # Options to pass to chrony.
  DAEMON_OPTS=""
diff --git a/dhcp/dhclient-exit-hooks.d/chrony b/dhcp/dhclient-exit-hooks.d/chrony

new file mode 100644 (file)

index 0000000..690f3ab
--- /dev/null
+++ b/dhcp/dhclient-exit-hooks.d/chrony
@@ -0,0 +1,25 @@
+SERVERFILE=/var/lib/dhcp/chrony.servers.$interface
+
+chrony_config() {
+    rm -f $SERVERFILE
+    for server in $new_ntp_servers; do
+        echo "$server iburst" >> $SERVERFILE
+    done
+    /usr/lib/chrony/chrony-helper update-daemon || :
+}
+
+chrony_restore() {
+    if [ -f $SERVERFILE ]; then
+        rm -f $SERVERFILE
+        /usr/lib/chrony/chrony-helper update-daemon || :
+    fi
+}
+
+case $reason in
+    BOUND|RENEW|REBIND|REBOOT)
+        chrony_config
+        ;;
+    EXPIRE|FAIL|RELEASE|STOP)
+        chrony_restore
+        ;;
+esac
diff --git a/init.d/chrony b/init.d/chrony

index 06bcd9c5c09291b8b596dd13b59808745b76f92b..bc376b59cfd64093bb0835e96d59598c6ecdc23a 100755 (executable)
--- a/init.d/chrony
+++ b/init.d/chrony
@@ -23,6 +23,7 @@ DAEMON=/usr/sbin/chronyd
  NAME="chronyd"
  DESC="time daemon"
  PIDFILE=/run/chronyd.pid
+CHRONY_HELPER=/usr/lib/chrony/chrony-helper
  
  [ -x "$DAEMON" ] || exit 0
  
@@ -41,6 +42,9 @@ case "$1" in
          else
              log_daemon_msg "Starting $DESC" "$NAME"
              start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- $DAEMON_OPTS
+            if [ -x $CHRONY_HELPER ]; then
+                $CHRONY_HELPER update-daemon
+            fi
              log_end_msg $?
          fi
          ;;
diff --git a/nanorc b/nanorc

index 9a64adb83e8cefcac82795cb9296e3163576ca1f..d3436186976c7e17bdb5ae55b0bd9077a7e6c415 100644 (file)
--- a/nanorc
+++ b/nanorc
@@ -57,9 +57,6 @@
  ## Remember the used search/replace strings for the next session.
  set historylog
  
-## Make the justify command kill whitespace at the end of lines.
-# set justifytrim
-
  ## Display line numbers to the left of the text.
  # set linenumbers
  
@@ -175,6 +172,9 @@ set suspend
  ## Save automatically on exit; don't prompt.
  # set tempfile
  
+## Snip whitespace at the end of lines when justifying or hard-wrapping.
+# set trimblanks
+
  ## Disallow file modification.  Why would you want this in an rcfile? ;)
  # set view
  
diff --git a/profile.d/bash_completion.sh b/profile.d/bash_completion.sh

index 0df14b590b51e89db30b05b7bbcd9825df772a1f..902a7f744eb87bd1e0fe03a67b620644e94df715 100644 (file)
--- a/profile.d/bash_completion.sh
+++ b/profile.d/bash_completion.sh
@@ -1,16 +1,15 @@
  # Check for interactive bash and that we haven't already been sourced.
-if [ -n "$BASH_VERSION" -a -n "$PS1" -a -z "$BASH_COMPLETION_COMPAT_DIR" ]; then
+if [ -n "${BASH_VERSION-}" -a -n "${PS1-}" -a -z "${BASH_COMPLETION_VERSINFO-}" ]; then
  
-# Check for recent enough version of bash.
-bash=${BASH_VERSION%.*}; bmajor=${bash%.*}; bminor=${bash#*.}
-if [ $bmajor -gt 4 ] || [ $bmajor -eq 4 -a $bminor -ge 1 ]; then
-    [ -r "${XDG_CONFIG_HOME:-$HOME/.config}/bash_completion" ] && \
-        . "${XDG_CONFIG_HOME:-$HOME/.config}/bash_completion"
-    if shopt -q progcomp && [ -r /usr/share/bash-completion/bash_completion ]; then
-        # Source completion code.
-        . /usr/share/bash-completion/bash_completion
+    # Check for recent enough version of bash.
+    if [ ${BASH_VERSINFO[0]} -gt 4 ] || \
+       [ ${BASH_VERSINFO[0]} -eq 4 -a ${BASH_VERSINFO[1]} -ge 1 ]; then
+        [ -r "${XDG_CONFIG_HOME:-$HOME/.config}/bash_completion" ] && \
+            . "${XDG_CONFIG_HOME:-$HOME/.config}/bash_completion"
+        if shopt -q progcomp && [ -r /usr/share/bash-completion/bash_completion ]; then
+            # Source completion code.
+            . /usr/share/bash-completion/bash_completion
+        fi
      fi
-fi
-unset bash bmajor bminor
  
  fi
diff --git a/skel/.profile b/skel/.profile

index c9db4591825bd7a918df686ff04aeb3a87d3bda0..d89ea5a6e83a2956d7461b547fa0d7d68103b9c9 100644 (file)
--- a/skel/.profile
+++ b/skel/.profile
@@ -20,3 +20,8 @@ fi
  if [ -d "$HOME/bin" ] ; then
      PATH="$HOME/bin:$PATH"
  fi
+
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/.local/bin" ] ; then
+    PATH="$HOME/.local/bin:$PATH"
+fi
diff --git a/sysctl.conf b/sysctl.conf

index e85c082557e6283d2a1b6b7fb5e963b92bef06ca..ad735929c8d88072b5100ee6256980b28db43149 100644 (file)
--- a/sysctl.conf
+++ b/sysctl.conf
@@ -61,17 +61,13 @@
  
  ###################################################################
  # Magic system request Key
-# 0=disable, 1=enable all
-# Debian kernels have this set to 0 (disable the key)
-# See https://www.kernel.org/doc/Documentation/sysrq.txt
+# 0=disable, 1=enable all, >1 bitmask of sysrq functions
+# Debian kernels have this set to 438 which is the OR of:
+#  64 = enable signalling of processes
+#  128 = allow reboot/poweroff
+#  256 = allow nicing of all RT tasks
+#
+# See https://www.kernel.org/doc/html/latest/admin-guide/sysrq.html
  # for what other values do
-#kernel.sysrq=1
+#kernel.sysrq=438
  
-###################################################################
-# Protected links
-#
-# Protects against creating or following links under certain conditions
-# Debian kernels have both set to 1 (restricted) 
-# See https://www.kernel.org/doc/Documentation/sysctl/fs.txt
-#fs.protected_hardlinks=0
-#fs.protected_symlinks=0
diff --git a/sysctl.d/protect-links.conf b/sysctl.d/protect-links.conf

new file mode 100644 (file)

index 0000000..255805e
--- /dev/null
+++ b/sysctl.d/protect-links.conf
@@ -0,0 +1,8 @@
+###################################################################
+# Protected links
+#
+# Protects against creating or following links under certain conditions
+# Debian kernels have both set to 1 (restricted) 
+# See https://www.kernel.org/doc/Documentation/sysctl/fs.txt
+fs.protected_hardlinks = 1
+fs.protected_symlinks = 1
author	Frank Brehm <frank@brehm-online.com>
	Mon, 26 Feb 2018 11:30:17 +0000 (12:30 +0100)
committer	Frank Brehm <frank@brehm-online.com>
	Mon, 26 Feb 2018 11:30:17 +0000 (12:30 +0100)
.etckeeper		patch \| blob \| history
apparmor.d/force-complain/usr.sbin.chronyd	[new symlink]	patch \| blob
apparmor.d/local/usr.sbin.chronyd	[new file with mode: 0644]	patch \| blob
apparmor.d/usr.bin.man		patch \| blob \| history
apparmor.d/usr.sbin.chronyd	[new file with mode: 0644]	patch \| blob
apt/apt.conf.d/01autoremove-kernels		patch \| blob \| history
bash.bashrc		patch \| blob \| history
console-setup/cached_UTF-8_del.kmap.gz		patch \| blob \| history
console-setup/cached_setup_keyboard.sh		patch \| blob \| history
default/chrony		patch \| blob \| history
dhcp/dhclient-exit-hooks.d/chrony	[new file with mode: 0644]	patch \| blob
init.d/chrony		patch \| blob \| history
nanorc		patch \| blob \| history
profile.d/bash_completion.sh		patch \| blob \| history
skel/.profile		patch \| blob \| history
sysctl.conf		patch \| blob \| history
sysctl.d/protect-links.conf	[new file with mode: 0644]	patch \| blob