Skip to content

etckeeper commits private keys (wg0.key, keel-tls/server.key) into /etc/.git #49

Closed
#50
Closed
etckeeper commits private keys (wg0.key, keel-tls/server.key) into /etc/.git#49
#50

Description

@marcos-mendez
marcos-mendez
opened on Oct 9, 2026

Found in the real-node test of the MariaDB pair, keel 0.23.3 (finding B8).

ID Severity Problem Output
B8 Medium etckeeper commits private keys into /etc/.git (0700 root): wireguard/wg0.key at the keel install, and mysql/keel-tls/server.key at the reinstall. The keys stay in git history after rotation. create mode 100644 wireguard/wg0.key; create mode 100644 mysql/keel-tls/server.key

Evidence: Keel-Linux/handbook#60, docs/evidence/2026-10-08-mariadb-pair-real.md.

Activity

  1. marcos-mendez
    closed this as completedin #50on Oct 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions