Index | Thread | Search

From:
Daniel Jakots <danj@chown.me>
Subject:
Re: text files in /etc/changelist stored as checksums only
To:
Martin Schröder <martin@oneiros.de>
Cc:
tech@openbsd.org
Date:
Wed, 19 Mar 2025 18:21:37 -0400

Download raw body.

Thread
On Wed, 19 Mar 2025 22:54:11 +0100, Martin Schröder <martin@oneiros.de>
wrote:

> May I ask why for /etc/hostname.* and several .conf files only
> checksums are stored? The man page of changelist claims this is done
> for "(generally non-text files)". Surely these are normally text
> files?

I assume it's because of passwords (which can be present in wifi
interface configurations and vpns like Wireguard).

The manpage could maybe be amended to mention the password/secret
aspect as it was mentioned in the commit that introduced the feature:
https://github.com/openbsd/src/commit/1e94625a312dd2d8958cd9bab647e9427d701c46

Cheers,
Daniel