From 9d4458ff22cf271c31a89967772a5afa34a61ae9 Mon Sep 17 00:00:00 2001 From: Darren 'Tadgy' Austin Date: Thu, 19 Oct 2023 21:10:39 +0100 Subject: [PATCH] Add a few files to tracking. --- etc/filesystems | 18 +++++++++++++++++ etc/ntp.conf | 31 +++++++++++++++++++++++++++++ etc/runit/runsvdir/default/autofs | 1 + etc/runit/runsvdir/default/dcron | 1 + etc/runit/runsvdir/default/ntpd | 1 + etc/runit/runsvdir/default/vmtoolsd | 1 + 6 files changed, 53 insertions(+) create mode 100644 etc/filesystems create mode 100644 etc/ntp.conf create mode 120000 etc/runit/runsvdir/default/autofs create mode 120000 etc/runit/runsvdir/default/dcron create mode 120000 etc/runit/runsvdir/default/ntpd create mode 120000 etc/runit/runsvdir/default/vmtoolsd diff --git a/etc/filesystems b/etc/filesystems new file mode 100644 index 0000000..5fcf6aa --- /dev/null +++ b/etc/filesystems @@ -0,0 +1,18 @@ +ext4 +ext3 +ext2 +iso9660 +exfat +vfat +ntfs +msdos +reiserfs +btrfs +jfs +xfs +f2fs +squashfs +romfs +udf +minix +* diff --git a/etc/ntp.conf b/etc/ntp.conf new file mode 100644 index 0000000..dac8658 --- /dev/null +++ b/etc/ntp.conf @@ -0,0 +1,31 @@ +# NTP servers to sync to. +server gw.afterdark.lan + +# Sync to local clock if no servers are available. +server 127.127.1.0 +fudge 127.127.1.0 stratum 10 + +# By default, restrict access to the service. +restrict -4 default limited nomodify noquery nopeer notrap kod +restrict -6 default limited nomodify noquery nopeer notrap kod + +# Allow localhost to query the service, but nothing else. +restrict -4 127.0.0.1 limited nomodify nopeer notrap kod +restrict -6 ::1 limited nomodify nopeer notrap kod + +# Allow local networks to sync with us. +# Edit the network address and mask below, and uncomment. +# restrict 192.168.1.0 mask 255.255.255.0 limited nomodify nopeer notrap kod + +# Where to store the drift calculation. +driftfile /var/db/ntpd/drift + +# Stats should be written here. +statsdir /var/db/ntpd/stats + +# PID file location. +pidfile /run/ntpd.pid + +# Disable the ntpdc -c monlist command, which is insecure and can be used +# to cause a denial of service attack (CVE-2013-5211). +disable monitor diff --git a/etc/runit/runsvdir/default/autofs b/etc/runit/runsvdir/default/autofs new file mode 120000 index 0000000..bf6c977 --- /dev/null +++ b/etc/runit/runsvdir/default/autofs @@ -0,0 +1 @@ +/etc/sv/autofs \ No newline at end of file diff --git a/etc/runit/runsvdir/default/dcron b/etc/runit/runsvdir/default/dcron new file mode 120000 index 0000000..5487a89 --- /dev/null +++ b/etc/runit/runsvdir/default/dcron @@ -0,0 +1 @@ +/etc/sv/dcron \ No newline at end of file diff --git a/etc/runit/runsvdir/default/ntpd b/etc/runit/runsvdir/default/ntpd new file mode 120000 index 0000000..995c2bd --- /dev/null +++ b/etc/runit/runsvdir/default/ntpd @@ -0,0 +1 @@ +/etc/sv/ntpd \ No newline at end of file diff --git a/etc/runit/runsvdir/default/vmtoolsd b/etc/runit/runsvdir/default/vmtoolsd new file mode 120000 index 0000000..5ec2ee9 --- /dev/null +++ b/etc/runit/runsvdir/default/vmtoolsd @@ -0,0 +1 @@ +/etc/sv/vmtoolsd \ No newline at end of file