Package: openswan Version: 1:2.4.12+dfsg-1.3 Severity: serious The installation scripts unconditionally modify /etc/ipsec.conf based on the openswan/enable-oe debconf setting without honouring local changes to the file.
If I choose 'openswan/enable-oe: false' and later remove the 'include /etc/ipsec.d/examples/no_oe.conf' line from /etc/ipsec.conf without reconfiguring the package, a re-installation will overwrite my configuration. The debconf database is not a registry. The master information is the configuration file and the debconf settings must be seeded from there if the configuration file is present. -- System Information: Debian Release: 5.0 APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.26-1-xen-686 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=fi_FI.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages openswan depends on: ii bind9-host [host] 1:9.5.0.dfsg.P2-5.1 Version of 'host' bundled with BIN ii bsdmainutils 6.1.10 collection of more utilities from ii debconf [debconf-2.0 1.5.24 Debian configuration management sy ii debianutils 2.30 Miscellaneous utilities specific t ii iproute 20080725-2 networking and traffic control too ii ipsec-tools 1:0.7.1-1.3 IPsec tools for Linux ii libc6 2.7-18 GNU C Library: Shared libraries ii libcurl3 7.18.2-8 Multi-protocol file transfer libra ii libgmp3c2 2:4.2.2+dfsg-3 Multiprecision arithmetic library ii libldap-2.4-2 2.4.11-1 OpenLDAP libraries ii libpam0g 1.0.1-5 Pluggable Authentication Modules l ii libssl0.9.8 0.9.8g-15 SSL shared libraries ii openssl 0.9.8g-15 Secure Socket Layer (SSL) binary a openswan recommends no packages. Versions of packages openswan suggests: pn curl <none> (no description available) pn openswan-modules-source | lin <none> (no description available) -- debconf information excluded -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org