Ignore files ending in - in the /etc/ dir e.g /etc/shadow-

CHANGELOG.md

@@ -3,7 +3,7 @@
  * Introduce `enroll explain` - a tool to analyze and explain what's in (or not in) a harvest and why.
  * Centralise the cron and logrotate stuff into their respective roles, we had a bit of duplication between roles based on harvest discovery.
  * Capture other files in the user's home directory such as `.bashrc`, `.bash_aliases`, `.profile`, if these files differ from the `/etc/skel` defaults
- * Ignore files that end with a tilde (probably backup files generated by editors)
+ * Ignore files that end with a tilde or - (probably backup files generated by editors or shadow file changes)
 
 # 0.2.3
 

enroll/ignore.py

@@ -102,7 +102,10 @@ class IgnorePolicy:
             return "log_file"
         # Ignore editor/backup files that end with a trailing tilde.
         if path.endswith("~"):
-            return "tilde_backup"
+            return "backup_file"
+        # Ignore backup shadow files
+        if path.startswith("/etc/") and path.endswith("-"):
+            return "backup_file"
 
         if not self.dangerous:
             for g in self.deny_globs or []: