On Wed, 08 Apr 2009, Resul Cetin wrote:
> I noticed that `dpkg-source -b SOURCEDIR` will create a *.debian.tar.gz

Only if you use a newer source format (and it's currently not the default
format).

> which includes personal informations.  This includes username and group
> of the current user which creates a package. These informations aren't
> meant for other people.

I find this reasoning too extreme. If the user builds a native package it
will also contain a tarball with its current user encoded:
$ apt-get source debhelper
[...]
$ tar ftv debhelper_7.2.7.tar.gz 
drwxr-xr-x joey/joey         0 2009-03-26 20:20 debhelper/
drwxr-xr-x joey/joey         0 2008-12-17 00:13 debhelper/Debian/

This is the case ever since Debian has existed and it has never been a problem.
So the problem is not affecting only Format: 3.0 (quilt).

Any upstream tarball also encodes the username of the upstream author:
$ tar ztvf zim_0.27.orig.tar.gz|head
drwxr-xr-x pardus/pardus     0 2008-11-12 21:02 Zim-0.27/
-r--r--r-- pardus/pardus 35982 2008-11-12 21:02 Zim-0.27/zim.pot

Since it doesn't create any problem at unpack time, I don't see a good reason
to change this behaviour. In fact it might even be useful to be able to track
down who built a package.

So I will not change this behaviour without a better rationale. I'll give some
time for people to comment (and for you to respond) but without a convincing
reason, I'll probably close it or tag it wontfix.

Cheers,
-- 
Raphaël Hertzog

Contribuez à Debian et gagnez un cahier de l'admin Debian Lenny :
http://www.ouaza.com/wp/2009/03/02/contribuer-a-debian-gagner-un-livre/



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to