Control: severity -1 normal Control: tags - security
Hey. On Sun, 2023-11-26 at 12:23 +1100, Dmitry Smirnov wrote: > I think you misunderstood that invocation of `update-smart-drivedb` > in postinst is an equivalent of > > ``` > cp -f /usr/share/smartmontools/drivedb.h > /var/lib/smartmontools/drivedb/ > ``` Indeed. At least from the documentation (only had a short glance now what it actually does if file= is set... but seems you're right). Sorry for that, I had wrongly in mind that --install would also download. Nevertheless, do you think it would possible to adapt it to check whether update-smart-drivedb is executable and if not fall back to the old code? Background is that at the university cluster I administrate we have set dpkg-statoverrides for various "code downloader" commands like update- smart-drivedb, update-ieee-data or update-pciids, which removes their executeable bit, so that they're at least not accidentally run. Would be nice if it could be kept that way. Thanks, Chris.
