etckeeper automatically sets up bzr repo

[Jim Bailey]

Binary package hint: etckeeper

Description: Ubuntu 9.10
Release: 9.10
etckeeper_0.38ubuntu1_all.deb

Upon installing etckeeper I expected to be able to choose my backend repository from git, mercurial or bzr however the package makes arbitary wrong decisons for me and commits the entire /etc/ structure to bzr without choice. This includes /etc/shadow and other sensitive files I would prefer not to be archived for security reasons.

[Kees Cook (kees)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

[Thierry Carrez (ttx)]

Setting a repository up at install-time is a feature of etckeeper upstream (and a good one). There is a "etckeeper uninit" command to reverse that default setup in case you want to pick a different VCS or do anything. So you can run:

sudo etckeeper uninit
sudo vi /etc/etckeeper/etckeeper.conf (and change VCS)
sudo etckeeper init
sudo etckeeper commit -m "Initial commit"