Package: gforge-web-apache2
Version: 5.3.2-1
Severity: serious
User: debian...@lists.debian.org
Usertags: piuparts

Hi,

during a test with piuparts I noticed your package installs files over
an existing symlink shipped or created by another package.

Your package ships:

  /etc/gforge/custom/index_std.php

but package ??? ships:

  /etc/???

cannot investigate in detail since someone broke php-htmlpurifier

  probably /etc/gforge -> fusionforge 
  or       /etc/gforge/custom -> ../fusionforge/custom


Installing something over existing symlinks is considered bad practice.
See e.g. http://lists.debian.org/87ehlevcrf....@windlord.stanford.edu

It may break in subtle ways and dpkg cannot detect this as a problem.
* Your package might silently overwrite files installed at the symlink
  destination by other packages.
* If the package shipping the symlink decides to make the link point
  somewhere else (or turn it into a real directory), the files owned
  by your package "will be lost" somewhere in the filesystem.
* Depending on installation order the problematic path will be created
  either as a symlink or a directory: the package installed first will
  "win" and all others have "lost".
  Note that dpkg intentionally does not replace directories with
  symlinks and vice versa, see in particular the end of point 4 in
  
http://www.debian.org/doc/debian-policy/ch-maintainerscripts.html#s-unpackphase
  (Note: Adding Pre-Depends is *not* a solution.)

Please move the files shipped in your package to the "real" location.

>From the attached log (usually somewhere in the middle...):

1m19.0s INFO: dirname part contains a symlink:
  /etc/gforge/custom/index_std.php (gforge-web-apache2) != 
/etc/fusionforge/custom/index_std.php (?)

And at the end, the shipped conffile is not cleaned up since the
symlink is already gone, making the file unreachable:

1m33.6s INFO: Warning: Package purging left files on system:
  /etc/fusionforge/custom/index_std.php  not owned
  /etc/systemd/system/postgresql.service -> /dev/null    not owned
  /var/lib/systemd/deb-systemd-helper-masked/    not owned
  /var/lib/systemd/deb-systemd-helper-masked/postgresql.service  not owned

(leaving the systemd stuff is another problem I haven't investigated
so far)


cheers,

Andreas

Attachment: gforge-web-apache2_5.3.2-1.log.gz
Description: application/gzip

Reply via email to