FM / etc

/etc

Name	Size	Mode	Actions
alternatives/	-	0755	rm
apache2/	-	0755	rm
apparmor/	-	0755	rm
apparmor.d/	-	0755	rm
apport/	-	0755	rm
apt/	-	0755	rm
avahi/	-	0755	rm
bash_completion.d/	-	0755	rm
binfmt.d/	-	0755	rm
byobu/	-	0755	rm
ca-certificates/	-	0755	rm
calendar/	-	0755	rm
cloud/	-	0755	rm
console-setup/	-	0755	rm
containerd/	-	0755	rm
cron.d/	-	0755	rm
cron.daily/	-	0755	rm
cron.hourly/	-	0755	rm
cron.monthly/	-	0755	rm
cron.weekly/	-	0755	rm
cryptsetup-initramfs/	-	0755	rm
dbconfig-common/	-	0755	rm
dbus-1/	-	0755	rm
default/	-	0755	rm
depmod.d/	-	0755	rm
dhcp/	-	0755	rm
docker/	-	0755	rm
dpkg/	-	0755	rm
emacs/	-	0755	rm
fail2ban/	-	0755	rm
fonts/	-	0755	rm
fwupd/	-	0755	rm
ghostscript/	-	0755	rm
groff/	-	0755	rm
grub.d/	-	0755	rm
gss/	-	0755	rm
ImageMagick-6/	-	0755	rm
init/	-	0755	rm
init.d/	-	0755	rm
initramfs-tools/	-	0755	rm
insserv.conf.d/	-	0755	rm
iproute2/	-	0755	rm
iscsi/	-	0755	rm
kernel/	-	0755	rm
landscape/	-	0775	rm
ld.so.conf.d/	-	0755	rm
ldap/	-	0755	rm
letsencrypt/	-	0755	rm
libblockdev/	-	0755	rm
libibverbs.d/	-	0755	rm
libnl-3/	-	0755	rm
libpaper.d/	-	0755	rm
lighttpd/	-	0755	rm
logcheck/	-	0755	rm
logrotate.d/	-	0755	rm
lvm/	-	0755	rm
mc/	-	0755	rm
mdadm/	-	0755	rm
ModemManager/	-	0755	rm
modprobe.d/	-	0755	rm
modules-load.d/	-	0755	rm
monit/	-	0755	rm
multipath/	-	0700	rm
mysql/	-	0755	rm
needrestart/	-	0755	rm
netplan/	-	0755	rm
network/	-	0755	rm
networkd-dispatcher/	-	0755	rm
NetworkManager/	-	0755	rm
newt/	-	0755	rm
nginx/	-	0755	rm
openmpi/	-	0755	rm
opt/	-	0755	rm
PackageKit/	-	0755	rm
pam.d/	-	0755	rm
perl/	-	0755	rm
php/	-	0755	rm
phpmyadmin/	-	0755	rm
pki/	-	0755	rm
pm/	-	0755	rm
polkit-1/	-	0755	rm
pollinate/	-	0755	rm
postfix/	-	0755	rm
postgresql-common/	-	0755	rm
ppp/	-	0755	rm
profile.d/	-	0755	rm
python2.7/	-	0755	rm
python3/	-	0755	rm
python3.10/	-	0755	rm
rc0.d/	-	0755	rm
rc1.d/	-	0755	rm
rc2.d/	-	0755	rm
rc3.d/	-	0755	rm
rc4.d/	-	0755	rm
rc5.d/	-	0755	rm
rc6.d/	-	0755	rm
rcS.d/	-	0755	rm
redis/	-	2770	rm
resolvconf/	-	0755	rm
rsyslog.d/	-	0755	rm
security/	-	0755	rm
selinux/	-	0755	rm
sensors.d/	-	0755	rm
skel/	-	0755	rm
sos/	-	0755	rm
ssh/	-	0755	rm
ssl/	-	0755	rm
sudoers.d/	-	0750	rm
sysctl.d/	-	0755	rm
systemd/	-	0755	rm
terminfo/	-	0755	rm
thermald/	-	0755	rm
tmpfiles.d/	-	0755	rm
ubuntu-advantage/	-	0755	rm
udev/	-	0755	rm
udisks2/	-	0755	rm
ufw/	-	0755	rm
update-manager/	-	0755	rm
update-motd.d/	-	0755	rm
update-notifier/	-	0755	rm
UPower/	-	0755	rm
usb_modeswitch.d/	-	0755	rm
usermin/	-	0755	rm
vim/	-	0755	rm
vmware-tools/	-	0755	rm
X11/	-	0755	rm
xdg/	-	0755	rm
.pwd.lock	0	0600	edit dl rm
adduser.conf	3028	0644	edit dl rm
aliases	51	0644	edit dl rm
aliases.db	12288	0644	edit dl rm
bash.bashrc	2319	0644	edit dl rm
bash_completion	45	0644	edit dl rm
bindresvport.blacklist	367	0644	edit dl rm
ca-certificates.conf	8756	0644	edit dl rm
ca-certificates.conf.dpkg-old	8182	0644	edit dl rm
crontab	1136	0644	edit dl rm
crypttab	54	0644	edit dl rm
debconf.conf	2969	0644	edit dl rm
debian_version	13	0644	edit dl rm
deluser.conf	604	0644	edit dl rm
e2scrub.conf	685	0644	edit dl rm
ec2_version	33	0644	edit dl rm
environment	106	0644	edit dl rm
ethertypes	1816	0644	edit dl rm
fstab	111	0644	edit dl rm
fstab.bak	84	0644	edit dl rm
fuse.conf	694	0644	edit dl rm
gai.conf	2584	0644	edit dl rm
group	948	0644	edit dl rm
group-	935	0644	edit dl rm
group.org	924	0644	edit dl rm
gshadow	782	0640	edit dl rm
gshadow-	772	0640	edit dl rm
hdparm.conf	4436	0644	edit dl rm
host.conf	92	0644	edit dl rm
hostname	8	0644	edit dl rm
hosts	541	0644	edit dl rm
hosts.allow	411	0644	edit dl rm
hosts.deny	711	0644	edit dl rm
inputrc	1748	0644	edit dl rm
issue	26	0644	edit dl rm
issue.net	19	0644	edit dl rm
kernel-img.conf	110	0644	edit dl rm
ld.so.cache	44896	0644	edit dl rm
ld.so.conf	34	0644	edit dl rm
legal	267	0644	edit dl rm
libaudit.conf	191	0644	edit dl rm
locale.alias	2996	0644	edit dl rm
locale.gen	9456	0644	edit dl rm
localtime	2262	0644	edit dl rm
login.defs	10734	0644	edit dl rm
logrotate.conf	592	0644	edit dl rm
lsb-release	104	0644	edit dl rm
machine-id	33	0444	edit dl rm
magic	111	0644	edit dl rm
magic.mime	111	0644	edit dl rm
mailcap	3733	0644	edit dl rm
mailcap.order	449	0644	edit dl rm
manpath.config	5217	0644	edit dl rm
mecabrc	288	0644	edit dl rm
mime.types	72029	0644	edit dl rm
mke2fs.conf	744	0644	edit dl rm
modules	195	0644	edit dl rm
mtab	0	0444	edit dl rm
multipath.conf	41	0644	edit dl rm
nanorc	11204	0644	edit dl rm
netconfig	767	0644	edit dl rm
networks	91	0644	edit dl rm
nftables.conf	228	0755	edit dl rm
nsswitch.conf	510	0644	edit dl rm
os-release	386	0644	edit dl rm
overlayroot.conf	6920	0644	edit dl rm
overlayroot.local.conf	112	0644	edit dl rm
pam.conf	552	0644	edit dl rm
papersize	3	0644	edit dl rm
passwd	2149	0644	edit dl rm
passwd-	2149	0644	edit dl rm
passwd.org	2090	0644	edit dl rm
profile	582	0644	edit dl rm
protocols	2932	0644	edit dl rm
resolv.conf	920	0644	edit dl rm
rmt	59976	0755	edit dl rm
rpc	887	0644	edit dl rm
rsyslog.conf	1382	0644	edit dl rm
screenrc	3663	0644	edit dl rm
sensors3.conf	10593	0644	edit dl rm
services	12813	0644	edit dl rm
shadow	1328	0640	edit dl rm
shadow-	1328	0640	edit dl rm
shadow.org	1410	0640	edit dl rm
shells	158	0644	edit dl rm
subgid	41	0644	edit dl rm
subgid-	65	0644	edit dl rm
subuid	41	0644	edit dl rm
subuid-	65	0644	edit dl rm
sudo.conf	4573	0644	edit dl rm
sudoers	1671	0440	edit dl rm
sudo_logsrvd.conf	9390	0644	edit dl rm
sysctl.conf	2355	0644	edit dl rm
sysctl.conf.dpkg-old	2393	0644	edit dl rm
sysctl.conf.save	2368	0644	edit dl rm
timezone	14	0644	edit dl rm
trafshow	1552	0644	edit dl rm
ucf.conf	1260	0644	edit dl rm
usb_modeswitch.conf	1523	0644	edit dl rm
vtrgb	158	0644	edit dl rm
wgetrc	4942	0644	edit dl rm
xattr.conf	681	0644	edit dl rm
zsh_command_not_found	460	0644	edit dl rm

Edit: /etc/login.defs (10734B)

#
# /etc/login.defs - Configuration control definitions for the login package.
#
# Three items must be defined:  MAIL_DIR, ENV_SUPATH, and ENV_PATH.
# If unspecified, some arbitrary (and possibly incorrect) value will
# be assumed.  All other items are optional - if not specified then
# the described action or option will be inhibited.
#
# Comment lines (lines beginning with "#") and blank lines are ignored.
#
# Modified for Linux.  --marekm

# REQUIRED for useradd/userdel/usermod
#   Directory where mailboxes reside, _or_ name of file, relative to the
#   home directory.  If you _do_ define MAIL_DIR and MAIL_FILE,
#   MAIL_DIR takes precedence.
#
#   Essentially:
#      - MAIL_DIR defines the location of users mail spool files
#        (for mbox use) by appending the username to MAIL_DIR as defined
#        below.
#      - MAIL_FILE defines the location of the users mail spool files as the
#        fully-qualified filename obtained by prepending the user home
#        directory before $MAIL_FILE
#
# NOTE: This is no more used for setting up users MAIL environment variable
#       which is, starting from shadow 4.0.12-1 in Debian, entirely the
#       job of the pam_mail PAM modules
#       See default PAM configuration files provided for
#       login, su, etc.
#
# This is a temporary situation: setting these variables will soon
# move to /etc/default/useradd and the variables will then be
# no more supported
MAIL_DIR        /var/mail
#MAIL_FILE      .mail

#
# Enable logging and display of /var/log/faillog login failure info.
# This option conflicts with the pam_tally PAM module.
#
FAILLOG_ENAB		yes

#
# Enable display of unknown usernames when login failures are recorded.
#
# WARNING: Unknown usernames may become world readable. 
# See #290803 and #298773 for details about how this could become a security
# concern
LOG_UNKFAIL_ENAB	no

#
# Enable logging of successful logins
#
LOG_OK_LOGINS		no

#
# Enable "syslog" logging of su activity - in addition to sulog file logging.
# SYSLOG_SG_ENAB does the same for newgrp and sg.
#
SYSLOG_SU_ENAB		yes
SYSLOG_SG_ENAB		yes

#
# If defined, all su activity is logged to this file.
#
#SULOG_FILE	/var/log/sulog

#
# If defined, file which maps tty line to TERM environment parameter.
# Each line of the file is in a format something like "vt100  tty01".
#
#TTYTYPE_FILE	/etc/ttytype

#
# If defined, login failures will be logged here in a utmp format
# last, when invoked as lastb, will read /var/log/btmp, so...
#
FTMP_FILE	/var/log/btmp

#
# If defined, the command name to display when running "su -".  For
# example, if this is defined as "su" then a "ps" will display the
# command is "-su".  If not defined, then "ps" would display the
# name of the shell actually being run, e.g. something like "-sh".
#
SU_NAME		su

#
# If defined, file which inhibits all the usual chatter during the login
# sequence.  If a full pathname, then hushed mode will be enabled if the
# user's name or shell are found in the file.  If not a full pathname, then
# hushed mode will be enabled if the file exists in the user's home directory.
#
HUSHLOGIN_FILE	.hushlogin
#HUSHLOGIN_FILE	/etc/hushlogins

#
# *REQUIRED*  The default PATH settings, for superuser and normal users.
#
# (they are minimal, add the rest in the shell startup files)
ENV_SUPATH	PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
ENV_PATH	PATH=/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games

#
# Terminal permissions
#
#	TTYGROUP	Login tty will be assigned this group ownership.
#	TTYPERM		Login tty will be set to this permission.
#
# If you have a "write" program which is "setgid" to a special group
# which owns the terminals, define TTYGROUP to the group number and
# TTYPERM to 0620.  Otherwise leave TTYGROUP commented out and assign
# TTYPERM to either 622 or 600.
#
# In Debian /usr/bin/bsd-write or similar programs are setgid tty
# However, the default and recommended value for TTYPERM is still 0600
# to not allow anyone to write to anyone else console or terminal

# Users can still allow other people to write them by issuing 
# the "mesg y" command.

TTYGROUP	tty
TTYPERM		0600

#
# Login configuration initializations:
#
#	ERASECHAR	Terminal ERASE character ('\010' = backspace).
#	KILLCHAR	Terminal KILL character ('\025' = CTRL/U).
#	UMASK		Default "umask" value.
#
# The ERASECHAR and KILLCHAR are used only on System V machines.
# 
# UMASK is the default umask value for pam_umask and is used by
# useradd and newusers to set the mode of the new home directories.
# 022 is the "historical" value in Debian for UMASK
# 027, or even 077, could be considered better for privacy
# There is no One True Answer here : each sysadmin must make up his/her
# mind.
#
# If USERGROUPS_ENAB is set to "yes", that will modify this UMASK default value
# for private user groups, i. e. the uid is the same as gid, and username is
# the same as the primary group name: for these, the user permissions will be
# used as group permissions, e. g. 022 will become 002.
#
# Prefix these values with "0" to get octal, "0x" to get hexadecimal.
#
ERASECHAR	0177
KILLCHAR	025
UMASK		022

# HOME_MODE is used by useradd(8) and newusers(8) to set the mode for new
# home directories.
# If HOME_MODE is not set, the value of UMASK is used to create the mode.
HOME_MODE	0750

#
# Password aging controls:
#
#	PASS_MAX_DAYS	Maximum number of days a password may be used.
#	PASS_MIN_DAYS	Minimum number of days allowed between password changes.
#	PASS_WARN_AGE	Number of days warning given before a password expires.
#
PASS_MAX_DAYS	99999
PASS_MIN_DAYS	0
PASS_WARN_AGE	7

#
# Min/max values for automatic uid selection in useradd
#
UID_MIN			 1000
UID_MAX			60000
# System accounts
#SYS_UID_MIN		  100
#SYS_UID_MAX		  999

#
# Min/max values for automatic gid selection in groupadd
#
GID_MIN			 1000
GID_MAX			60000
# System accounts
#SYS_GID_MIN		  100
#SYS_GID_MAX		  999

#
# Max number of login retries if password is bad. This will most likely be
# overriden by PAM, since the default pam_unix module has it's own built
# in of 3 retries. However, this is a safe fallback in case you are using
# an authentication module that does not enforce PAM_MAXTRIES.
#
LOGIN_RETRIES		5

#
# Max time in seconds for login
#
LOGIN_TIMEOUT		60

#
# Which fields may be changed by regular users using chfn - use
# any combination of letters "frwh" (full name, room number, work
# phone, home phone).  If not defined, no changes are allowed.
# For backward compatibility, "yes" = "rwh" and "no" = "frwh".
# 
CHFN_RESTRICT		rwh

#
# Should login be allowed if we can't cd to the home directory?
# Default in no.
#
DEFAULT_HOME	yes

#
# If defined, this command is run when removing a user.
# It should remove any at/cron/print jobs etc. owned by
# the user to be removed (passed as the first argument).
#
#USERDEL_CMD	/usr/sbin/userdel_local

#
# Enable setting of the umask group bits to be the same as owner bits
# (examples: 022 -> 002, 077 -> 007) for non-root users, if the uid is
# the same as gid, and username is the same as the primary group name.
#
# If set to yes, userdel will remove the user's group if it contains no
# more members, and useradd will create by default a group with the name
# of the user.
#
USERGROUPS_ENAB yes

#
# Instead of the real user shell, the program specified by this parameter
# will be launched, although its visible name (argv[0]) will be the shell's.
# The program may do whatever it wants (logging, additional authentification,
# banner, ...) before running the actual shell.
#
# FAKE_SHELL /bin/fakeshell

#
# If defined, either full pathname of a file containing device names or
# a ":" delimited list of device names.  Root logins will be allowed only
# upon these devices.
#
# This variable is used by login and su.
#
#CONSOLE	/etc/consoles
#CONSOLE	console:tty01:tty02:tty03:tty04

#
# List of groups to add to the user's supplementary group set
# when logging in on the console (as determined by the CONSOLE
# setting).  Default is none.
#
# Use with caution - it is possible for users to gain permanent
# access to these groups, even when not logged in on the console.
# How to do it is left as an exercise for the reader...
#
# This variable is used by login and su.
#
#CONSOLE_GROUPS		floppy:audio:cdrom

#
# If set to "yes", new passwords will be encrypted using the MD5-based
# algorithm compatible with the one used by recent releases of FreeBSD.
# It supports passwords of unlimited length and longer salt strings.
# Set to "no" if you need to copy encrypted passwords to other systems
# which don't understand the new algorithm.  Default is "no".
#
# This variable is deprecated. You should use ENCRYPT_METHOD.
#
#MD5_CRYPT_ENAB	no

#
# If set to MD5 , MD5-based algorithm will be used for encrypting password
# If set to SHA256, SHA256-based algorithm will be used for encrypting password
# If set to SHA512, SHA512-based algorithm will be used for encrypting password
# If set to DES, DES-based algorithm will be used for encrypting password (default)
# Overrides the MD5_CRYPT_ENAB option
#
# Note: It is recommended to use a value consistent with
# the PAM modules configuration.
#
ENCRYPT_METHOD SHA512

#
# Only used if ENCRYPT_METHOD is set to SHA256 or SHA512.
#
# Define the number of SHA rounds.
# With a lot of rounds, it is more difficult to brute forcing the password.
# But note also that it more CPU resources will be needed to authenticate
# users.
#
# If not specified, the libc will choose the default number of rounds (5000).
# The values must be inside the 1000-999999999 range.
# If only one of the MIN or MAX values is set, then this value will be used.
# If MIN > MAX, the highest value will be used.
#
# SHA_CRYPT_MIN_ROUNDS 5000
# SHA_CRYPT_MAX_ROUNDS 5000

################# OBSOLETED BY PAM ##############
#						#
# These options are now handled by PAM. Please	#
# edit the appropriate file in /etc/pam.d/ to	#
# enable the equivelants of them.
#
###############

#MOTD_FILE
#DIALUPS_CHECK_ENAB
#LASTLOG_ENAB
#MAIL_CHECK_ENAB
#OBSCURE_CHECKS_ENAB
#PORTTIME_CHECKS_ENAB
#SU_WHEEL_ONLY
#CRACKLIB_DICTPATH
#PASS_CHANGE_TRIES
#PASS_ALWAYS_WARN
#ENVIRON_FILE
#NOLOGINS_FILE
#ISSUE_FILE
#PASS_MIN_LEN
#PASS_MAX_LEN
#ULIMIT
#ENV_HZ
#CHFN_AUTH
#CHSH_AUTH
#FAIL_DELAY

################# OBSOLETED #######################
#						  #
# These options are no more handled by shadow.    #
#                                                 #
# Shadow utilities will display a warning if they #
# still appear.                                   #
#                                                 #
###################################################

# CLOSE_SESSIONS
# LOGIN_STRING
# NO_PASSWORD_CONSOLE
# QMAIL_DIR

cmd: