severity 595450 important thanks Hi Jordan
I suggest that you simply mark them as configuration files. Someone could actually be interested in modifying them. Rare, yes but it could very well be the case. But if you have a different solution that is ok as well. However I do not find any statement in chapter 9.1.1 that claim that this problem is a serious violation. Where do you find that? As you have not yet adopted ntop (even if you are close to it), I'm lowering this bug to important. Best regards, // Ola On Fri, Sep 03, 2010 at 08:58:04PM -0400, Jordan Metzmeier wrote: > Package: ntop > Version: 3:3.3-14 > Severity: serious > Justification: Policy 9.1.1 > > AS-list.txt > etter.finger.os > oui.txt > p2c.opt.table > > The above files are placed in /etc but are not configuration files. They > contain > ascii data. It is concievable that someone would replace these files, but > doubtful > that anyone would edit them directly. > > oui.txt is used by 6 total packages and perhaps should be moved to a > different package > that others can declare Depends on. > > I plan to have a patch and/or upload for this and the license issue next week. > > > -- System Information: > Debian Release: squeeze/sid > APT prefers testing > APT policy: (990, 'testing'), (500, 'stable'), (1, 'experimental'), (1, > 'unstable') > Architecture: i386 (i686) > > Kernel: Linux 2.6.32-5-686-bigmem (SMP w/4 CPU cores) > Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) > Shell: /bin/sh linked to /bin/dash > > Versions of packages ntop depends on: > ii adduser 3.112 add and remove users and groups > ii debconf [debconf-2.0] 1.5.35 Debian configuration management > sy > ii libc6 2.11.2-2 Embedded GNU C Library: Shared > lib > ii libgdbm3 1.8.3-9 GNU dbm database routines > (runtime > ii libpcap0.8 1.1.1-2 system interface for user-level > pa > ii librrd4 1.4.3-2 time-series data storage and > displ > ii libssl0.9.8 0.9.8o-1 SSL shared libraries > ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime > > ntop recommends no packages. > > Versions of packages ntop suggests: > pn graphviz <none> (no description available) > ii gsfonts 1:8.11+urwcyr1.0.7~pre44-4.2 Fonts for the Ghostscript > interpre > > -- debconf information excluded > > > -- --------------------- Ola Lundqvist --------------------------- / o...@debian.org Annebergsslingan 37 \ | o...@inguza.com 654 65 KARLSTAD | | http://inguza.com/ +46 (0)70-332 1551 | \ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 / --------------------------------------------------------------- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org