Package: debian-policy
Severity: normal

Dear policy team,

I am seeking clarification regarding the applicability of Section 9.1.2
of the Debian Policy [1] to the /var/local directory.

The current policy states: "If /etc/staff-group-for-usr-local does not
exist, /usr/local and all subdirectories created by packages should have
permissions 0755 and be owned by root:root"

This wording specifically addresses /usr/local and does not mention
/var/local, which serves a related purpose. Currently, /var/local is
owned by root:staff with 2775 permissions regardless of the existence of
/etc/staff-group-for-usr-local.

The base-files package creates /var/local with root:staff ownership and
2775 permissions, despite the absence of /etc/staff-group-for-usr-local,
as noted in #1039973 [2].

Therefore, I would like to ask whether the policy should be revised to
explicitly cover both /usr/local and /var/local, or if the omission of
/var/local and its subdirectories from policy is intentional.

[1] 
https://www.debian.org/doc/debian-policy/ch-opersys.html#site-specific-programs
[2] https://bugs.debian.org/1039973

Reply via email to