From: Martin Schröder <martin@oneiros.de>
Subject: text files in /etc/changelist stored as checksums only
To: tech@openbsd.org
Date: Wed, 19 Mar 2025 22:54:11 +0100

This is on 7.5:

> grep + /etc/changelist
# Files prefixed with a '+' will have their checksums stored,
+/etc/hostname.*
+/etc/iked.conf
+/etc/iked/private/local.key
+/etc/ipsec.conf
+/etc/isakmpd/isakmpd.conf
+/etc/isakmpd/isakmpd.policy
+/etc/isakmpd/private/local.key
+/etc/moduli
+/etc/npppd/npppd-users
+/etc/pwd.db
+/etc/radiusd.conf
+/etc/snmpd.conf
+/etc/soii.key
+/etc/spwd.db
+/etc/ssh/ssh_host_ecdsa_key
+/etc/ssh/ssh_host_ed25519_key
+/etc/ssh/ssh_host_key
+/etc/ssh/ssh_host_rsa_key
+/var/nsd/etc/nsd.conf
+/var/unbound/etc/unbound_control.key
+/var/unbound/etc/unbound_server.key

May I ask why for /etc/hostname.* and several .conf files only checksums
are stored? The man page of changelist claims this is done for "(generally
non-text files)". Surely these are normally text files?

Best
     Martin