1#	$OpenBSD: changelist,v 1.138 2023/12/13 11:34:56 job Exp $
2#
3# List of files which the security script backs up and checks
4# for modifications.
5#
6# Files prefixed with a '+' will have their checksums stored,
7# not the actual files.
8#
9
10/etc/Distfile
11/etc/acme-client.conf
12/etc/adduser.conf
13/etc/adduser.message
14/etc/bgpd.conf
15/etc/boot.conf
16/etc/bootparams
17/etc/bsd.re-config
18/etc/changelist
19/etc/chio.conf
20/etc/crontab
21/etc/csh.cshrc
22/etc/csh.login
23/etc/csh.logout
24/etc/daily
25/etc/daily.local
26/etc/defaultdomain
27/etc/dhcpd.conf
28/etc/dhcpleased.conf
29/etc/disktab
30/etc/distfile
31/etc/doas.conf
32/etc/dvmrpd.conf
33/etc/eigrpd.conf
34/etc/ethers
35/etc/exports
36/etc/fbtab
37/etc/fstab
38/etc/ftpchroot
39/etc/ftpusers
40/etc/ftpwelcome
41/etc/gettytab
42/etc/group
43/etc/hostapd.conf
44+/etc/hostname.*
45/etc/hosts
46/etc/hosts.lpd
47/etc/httpd.conf
48/etc/ifstated.conf
49+/etc/iked.conf
50/etc/iked/local.pub
51+/etc/iked/private/local.key
52/etc/inetd.conf
53/etc/installurl
54+/etc/ipsec.conf
55+/etc/isakmpd/isakmpd.conf
56+/etc/isakmpd/isakmpd.policy
57/etc/isakmpd/local.pub
58+/etc/isakmpd/private/local.key
59/etc/ksh.kshrc
60/etc/ldapd.conf
61/etc/ldpd.conf
62/etc/locate.rc
63/etc/login.conf
64/etc/login.conf.d/*
65/etc/login_ldap.conf
66/etc/mail.rc
67/etc/mail/aliases
68/etc/mail/smtpd.conf
69/etc/mail/spamd.conf
70/etc/mailer.conf
71/etc/man.conf
72/etc/master.passwd
73/etc/mixerctl.conf
74/etc/mk.conf
75+/etc/moduli
76/etc/monthly
77/etc/monthly.local
78/etc/motd
79/etc/mrouted.conf
80/etc/mtree/4.4BSD.dist
81/etc/mtree/BSD.x11.dist
82/etc/mtree/special
83/etc/mygate
84/etc/myname
85/etc/netgroup
86/etc/netstart
87/etc/newsyslog.conf
88/etc/npppd/npppd.conf
89+/etc/npppd/npppd-users
90/etc/ntpd.conf
91/etc/ospf6d.conf
92/etc/ospfd.conf
93/etc/passwd
94/etc/pf.conf
95/etc/pf.os
96/etc/printcap
97/etc/profile
98/etc/protocols
99+/etc/pwd.db
100/etc/rad.conf
101+/etc/radiusd.conf
102/etc/rbootd.conf
103/etc/rc
104/etc/rc.conf
105/etc/rc.conf.local
106/etc/rc.d/rc.subr
107/etc/rc.local
108/etc/rc.securelevel
109/etc/rc.shutdown
110/etc/relayd.conf
111/etc/remote
112/etc/resolv.conf
113/etc/ripd.conf
114/etc/rpc
115/etc/rpki/afrinic.constraints
116/etc/rpki/afrinic.tal
117/etc/rpki/apnic.constraints
118/etc/rpki/apnic.tal
119/etc/rpki/arin.constraints
120/etc/rpki/arin.tal
121/etc/rpki/lacnic.constraints
122/etc/rpki/lacnic.tal
123/etc/rpki/ripe.constraints
124/etc/rpki/ripe.tal
125/etc/rpki/skiplist
126/etc/sasyncd.conf
127/etc/sensorsd.conf
128/etc/services
129/etc/shells
130+/etc/snmpd.conf
131+/etc/soii.key
132+/etc/spwd.db
133/etc/ssh/ssh_config
134+/etc/ssh/ssh_host_ecdsa_key
135/etc/ssh/ssh_host_ecdsa_key.pub
136+/etc/ssh/ssh_host_ed25519_key
137/etc/ssh/ssh_host_ed25519_key.pub
138+/etc/ssh/ssh_host_key
139/etc/ssh/ssh_host_key.pub
140+/etc/ssh/ssh_host_rsa_key
141/etc/ssh/ssh_host_rsa_key.pub
142/etc/ssh/sshd_config
143/etc/ssl/cert.pem
144/etc/suid_profile
145/etc/sysctl.conf
146/etc/syslog.conf
147/etc/sysmerge.ignore
148/etc/tmux.conf
149/etc/ttys
150/etc/unwind.conf
151/etc/usermgmt.conf
152/etc/vm.conf
153/etc/weekly
154/etc/weekly.local
155/etc/wsconsctl.conf
156/etc/ypldap.conf
157/root/.Xdefaults
158/root/.cshrc
159/root/.login
160/root/.profile
161/root/.rhosts
162/root/.shosts
163/root/.ssh/authorized_keys
164/root/.ssh/authorized_keys2
165/var/cron/at.allow
166/var/cron/at.deny
167/var/cron/cron.allow
168/var/cron/cron.deny
169/var/cron/tabs/root
170/var/db/unwind.key
171+/var/nsd/etc/nsd.conf
172/var/unbound/etc/unbound.conf
173+/var/unbound/etc/unbound_control.key
174/var/unbound/etc/unbound_control.pem
175+/var/unbound/etc/unbound_server.key
176/var/unbound/etc/unbound_server.pem
177/var/yp/Makefile.main
178/var/yp/Makefile.yp
179/.cshrc
180/.profile
181