committing changes in /etc after apt run

Package changes:
+debsums 3.0.2 all
+libfile-fnmatch-perl 0.02-2+b8 amd64

.etckeeper

@@ -432,6 +432,7 @@ maybe chmod 0755 'cron.daily/00logwatch'
 maybe chmod 0755 'cron.daily/apt-compat'
 maybe chmod 0755 'cron.daily/chkrootkit'
 maybe chmod 0755 'cron.daily/cracklib-runtime'
+maybe chmod 0755 'cron.daily/debsums'
 maybe chmod 0755 'cron.daily/dpkg'
 maybe chmod 0755 'cron.daily/etckeeper'
 maybe chmod 0755 'cron.daily/logrotate'
@@ -443,8 +444,10 @@ maybe chmod 0755 'cron.hourly'
 maybe chmod 0644 'cron.hourly/.placeholder'
 maybe chmod 0755 'cron.monthly'
 maybe chmod 0644 'cron.monthly/.placeholder'
+maybe chmod 0755 'cron.monthly/debsums'
 maybe chmod 0755 'cron.weekly'
 maybe chmod 0644 'cron.weekly/.placeholder'
+maybe chmod 0755 'cron.weekly/debsums'
 maybe chmod 0755 'cron.weekly/man-db'
 maybe chmod 0755 'cron.weekly/rkhunter'
 maybe chmod 0644 'crontab'
@@ -461,6 +464,7 @@ maybe chmod 0644 'default/amavisd-snmp-subagent'
 maybe chmod 0644 'default/console-setup'
 maybe chmod 0644 'default/cron'
 maybe chmod 0644 'default/dbus'
+maybe chmod 0644 'default/debsums'
 maybe chmod 0644 'default/dovecot'
 maybe chmod 0644 'default/fail2ban'
 maybe chmod 0644 'default/grub'

cron.daily/debsums

@@ -0,0 +1,27 @@
+#!/bin/sh
+
+debsums="/usr/bin/debsums"
+ignorefile="/etc/debsums-ignore"
+
+[ -x $debsums ] || exit 0
+
+if ! [ -e "$ignorefile" ]; then
+    ignorefile="/dev/null"
+fi
+
+# source our config
+. /etc/default/debsums
+[ "z$CRON_CHECK" = "zdaily" ] || exit 0
+
+# See ionice(1)
+if [ -x /usr/bin/ionice ] &&
+    /usr/bin/ionice -c3 true 2>/dev/null; then
+    IONICE="/usr/bin/ionice -c3"
+fi
+
+exec 3>&1
+
+$IONICE $debsums -cs 2>&1 | egrep -vf "$ignorefile" | tee /proc/self/fd/3 | sed 's/^debsums: //' | logger -t debsums
+
+# Exit with a normal status code even if errors (which could be ignored) were found
+exit 0

cron.monthly/debsums

@@ -0,0 +1,27 @@
+#!/bin/sh
+
+debsums="/usr/bin/debsums"
+ignorefile="/etc/debsums-ignore"
+
+[ -x $debsums ] || exit 0
+
+if ! [ -e "$ignorefile" ]; then
+    ignorefile="/dev/null"
+fi
+
+# source our config
+. /etc/default/debsums
+[ "z$CRON_CHECK" = "zmonthly" ] || exit 0
+
+# See ionice(1)
+if [ -x /usr/bin/ionice ] &&
+    /usr/bin/ionice -c3 true 2>/dev/null; then
+    IONICE="/usr/bin/ionice -c3"
+fi
+
+exec 3>&1
+
+$IONICE $debsums -cs 2>&1 | egrep -vf "$ignorefile" | tee /proc/self/fd/3 | sed 's/^debsums: //' | logger -t debsums
+
+# Exit with a normal status code even if errors (which could be ignored) were found
+exit 0

cron.weekly/debsums

@@ -0,0 +1,27 @@
+#!/bin/sh
+
+debsums="/usr/bin/debsums"
+ignorefile="/etc/debsums-ignore"
+
+[ -x $debsums ] || exit 0
+
+if ! [ -e "$ignorefile" ]; then
+    ignorefile="/dev/null"
+fi
+
+# source our config
+. /etc/default/debsums
+[ "z$CRON_CHECK" = "zweekly" ] || exit 0
+
+# See ionice(1)
+if [ -x /usr/bin/ionice ] &&
+    /usr/bin/ionice -c3 true 2>/dev/null; then
+    IONICE="/usr/bin/ionice -c3"
+fi
+
+exec 3>&1
+
+$IONICE $debsums -cs 2>&1 | egrep -vf "$ignorefile" | tee /proc/self/fd/3 | sed 's/^debsums: //' | logger -t debsums
+
+# Exit with a normal status code even if errors (which could be ignored) were found
+exit 0

default/debsums

@@ -0,0 +1,10 @@
+# Defaults for debsums cron jobs
+# sourced by /etc/cron.d/debsums
+
+#
+# This is a POSIX shell fragment
+#
+
+# Set this to never to disable the checksum verification or
+# one of "daily", "weekly", "monthly" to enable it
+CRON_CHECK=never