Hi, On Fri, Mar 22, 2013 at 08:21:56PM +0100, Andrew Shadura wrote: > Hello, > > On Fri, 22 Mar 2013 19:51:08 +0100 > Ricardo Mones <mo...@debian.org> wrote: > > > > Policy §12.3 doesn't require you to compress example scripts. It's > > > not plain text documentation, it's sample code. > > > True, only say they should be compressed. Anyway, since they're > > examples there's nothing wrong in compress them to save space as > > policy recommends. > > In fact, the Policy says nothing about compressing examples at all (see > §12.6).
Yep, and nothing against compressing them :) > > > > And this also makes you sure you don't have a random executable > > > > script in /usr/share/doc ready to be exploited. > > > > Don't put random executable scripts into /usr/share/doc then. > > > They're not executable: > > Well, actually that would be good if they were. Anyway, if they were > uncompressed, I could at least run them as 'sh /usr/share/doc/.../...sh' > or something like that. What I actually meant is this: > > i) If tha package maintainer puts scripts into the package, he at least > checked that they're fine and 'not random'. Indeed, and they're fine enough to be where they currently are :) > ii) As those scripts are in a separate package, and I install it > deliberately, I *do* want to run them without any annoying extra > operations. Otherwise why do I need the package at all? I could have > downloaded those scripts myself then. Well, the package eases that download and the management of the files in the system. You're free not to use it and download it by hand it you think that's easier for you, of course. I'm starting to think the "ready to use solutions" phrase in package description made you think the scripts would be available under /usr/bin or directly runnable. For me that the solution is ready doesn't necesarily mean I can run the script directly. Anyway I'll add a brief explanation to try to minimize confussion. regards, -- Ricardo Mones ~ bash: ./signature: No such file or directory /bin/bash
signature.asc
Description: Digital signature