.\" Generated by scdoc 1.11.4
.\" Complete documentation for this program is not available as a GNU info page
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.nh
.ad l
.\" Begin generated content:
.TH "apk-protected_paths" "5" "2025-12-12"
.PP
.SH NAME
.PP
\fB/etc/apk/protected_paths.\&d/*.\&list\fR - paths with special treatement by apk
.PP
.SH DESCRIPTION
.PP
Files in \fI/etc/apk/protected_paths.\&d/*.\&list\fR enumerate files are protected and
are not overwritten by \fBapk\fR(8).\& Generally, these are configuration files that
are expected to be modified by the system administrator.\& These files also
receive special treatment by \fBapk-audit\fR(8).\&
.PP
If \fBapk\fR(8) would install a file into a protected path which has been modified,
it shall intend write the file into a file with the \fI.\&apk-new\fR suffix.\&
.PP
For example, once the file \fI/etc/passwd\fR is modified by the local administrator,
\fBapk\fR(8) should not overwrite it when upgrading or fixing packages.\& Likewise,
protected files modified by any automation (including post-install scripts) are
not overwritten.\&
.PP
\fBapk-audit(8)\fR shall report protected paths by default.\& When using
\fBapk audit --system\fR or \fBapk audit --full\fR, protected files shall be omitted
from the output.\& When  using \fBapk audit --backup\fR, matching files are always
reported.\& This is in turn used by \fBlbu commit\fR.\&
.PP
.SH FILE FORMAT
.PP
Each line is a single rule composed of one symbol followed with a glob
expression, which shall be evaluated relative to the root directory.\&
.PP
The initial symbol must be one of:
.PP
\fB+\fR
.RS 4
Protect matching paths only if the file'\&s checksum does not match the
one in the apk database.\&
.PP
.RE
\fB-\fR
.RS 4
Do not protect matching paths, even if it matched a previous rule.\&
.PP
.RE
\fB@\fR
.RS 4
Protect matching paths only if they are symlinks which have been
modified.\&
.PP
.RE
\fB!\&\fR
.RS 4
Protect matching path unconditionally.\&
.PP
.RE
Lines starting with \fB#\fR and empty lines are ignored.\&
.PP
.SH EXAMPLES
.PP
.nf
.RS 4
# This line is ignored; it is a comment\&.
+etc/
@etc/init\&.d
!etc/apk
-etc/ssl/certs/ca-cert-*\&.pem
.fi
.RE
.PP
.SH CAVEATS
.PP
If a file is modified, and its contents eventually become the same as what was
originally installed by apk, the file is considered to have been unmodified.\&
.PP
Wildcard patterns are not taken into account by \fBapk\fR(8) when creating
\fB.\&apk-new\fR files instead of overwriting files.\&
.PP
.SH SEE ALSO
.PP
\fBapk\fR(8), \fBapk-audit\fR(8)