These files are not from upstream, they're part of the Debian runit configuration (which is optional, off by default).
They are not log files (well, one is a symlink to /var/log/dropbear) or runtime status files, but rather config files for Dropbear. I see no problem with readonly program-specific configuration files being under /etc/dropbear, according to the FHS? Matt Dropbear Upstream -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org