Package: pdnsd
Version: 1.2.8-par-3
Severity: serious
Justification: Policy 9.1.1

Dear Maintainer,

I've installed pdnsd on a system in testing for rolling out
to production.  The configuration that this package currently
uses, with the configuration in /usr/share/pdnsd, violates Debian
Policy section 9.1.1 (filesystem hierarchy), FHS specifications
for /etc and /usr/share.  The configs are definitely not read-only,
and thus do not belong in /usr/share.

Arguably the entire AUTO_MODE configuration system should be
removed because it is a blatant violation of both the FHS (and
Debian Policy by reference) and POLA.  In no circumstance would I
expect to find configuration in /usr/share, ever.

This is related to something else I found, which I'm not
sure whether to file as a separate bug.  When I use my
own configuration instead of the bizarre /usr/share/pdnsd
configuration, the init scripts makes assumptions that are not
made clear: specifically, that pdnsd needs to drop privileges
to the autocreated pdnsd user and that I must enable the
status socket.  The privilege dropping is obvious, but it
should still be made clear to the administrator when using
their own configuration.  Without these settings, pdnsd and
its init script don't function properly.  If this should be
filed separately, I'll be glad to do so.

-- System Information:
Debian Release: 7.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages pdnsd depends on:
ii  adduser                3.113+nmu3
ii  debconf [debconf-2.0]  1.5.49
ii  libc6                  2.13-38+deb7u1

Versions of packages pdnsd recommends:
pn  resolvconf  <none>

pdnsd suggests no packages.

-- debconf information:
* pdnsd/conf: Manual


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to