Your message dated Wed, 03 Oct 2012 18:47:33 +0000 with message-id <e1tjtyn-0006e5...@franck.debian.org> and subject line Bug#688562: fixed in cxref 1.6d-5 has caused the Debian Bug report #688562, regarding cxref: modifies conffiles (policy 10.7.3): /etc/cxref/config to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 688562: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688562 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: cxref Version: 1.6d-2 Severity: serious Tags: squeeze-ignore User: debian...@lists.debian.org Usertags: piuparts Hi, during a test with piuparts I noticed your package modifies conffiles. This is forbidden by the policy, see http://www.debian.org/doc/debian-policy/ch-files.html#s-config-files 10.7.3: "[...] The easy way to achieve this behavior is to make the configuration file a conffile. [...] This implies that the default version will be part of the package distribution, and must not be modified by the maintainer scripts during installation (or at any other time)." Note that once a package ships a modified version of that conffile, dpkg will prompt the user for an action how to handle the upgrade of this modified conffile (that was not modified by the user). Further in 10.7.3: "[...] must not ask unnecessary questions (particularly during upgrades) [...]" If a configuration file is customized by a maintainer script after having asked some debconf questions, it may not be marked as a conffile. Instead a template could be installed in /usr/share and used by the postinst script to fill in the custom values and create (or update) the configuration file (preserving any user modifications!). This file must be removed during postrm purge. ucf(1) may help with these tasks. See also http://wiki.debian.org/DpkgConffileHandling In https://lists.debian.org/debian-devel/2012/09/msg00412.html and followups it has been agreed that these bugs are to be filed with severity serious. debsums reports modification of the following files, from the attached log (scroll to the bottom...): /etc/cxref/config cheers, Andreas
cxref_1.6d-2.log.gz
Description: GNU Zip compressed data
--- End Message ---
--- Begin Message ---Source: cxref Source-Version: 1.6d-5 We believe that the bug you reported is fixed in the latest version of cxref, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 688...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Camm Maguire <c...@debian.org> (supplier of updated cxref package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 03 Oct 2012 18:05:12 +0000 Source: cxref Binary: cxref cxref-doc cxref-emacs Architecture: source all i386 Version: 1.6d-5 Distribution: unstable Urgency: high Maintainer: Camm Maguire <c...@debian.org> Changed-By: Camm Maguire <c...@debian.org> Description: cxref - Generates LaTeX and HTML documentation for C programs cxref-doc - Generates LaTeX and HTML documentation for C programs cxref-emacs - Generates LaTeX and HTML documentation for C programs Closes: 688562 Changes: cxref (1.6d-5) unstable; urgency=high . * Bug fix: "modifies conffiles (policy 10.7.3): /etc/cxref/config", thanks to Andreas Beckmann (Closes: #688562). Checksums-Sha1: 5dabb4a7a9890ab1f3fce7713a138e188055cf65 1222 cxref_1.6d-5.dsc e56716ba7da5fb17e590974e83286ab37503940c 32964 cxref_1.6d-5.debian.tar.gz 1b207794ccf262b32a6fc35e37f98ea956c355a4 787724 cxref-doc_1.6d-5_all.deb bd2db246c174d9dd6c3ad7c00db2d378b9516833 16112 cxref-emacs_1.6d-5_all.deb 613a6aa37e4c135ea358a5a0981f3dc649bf98ed 511498 cxref_1.6d-5_i386.deb Checksums-Sha256: 99f605f451ccd3e35d593c2c9653a7bee328b72390575161888fb1fb8e0d029a 1222 cxref_1.6d-5.dsc d49bf5b9b74bb3969cafc5e5fc1c7110fbca82c8c2af13aea6c9ba18ae390638 32964 cxref_1.6d-5.debian.tar.gz 2631ce258b8ec4b079a6e0055974a74710760b961bf63158b2f702fb336fef58 787724 cxref-doc_1.6d-5_all.deb 1a4985f054960671dcf63772272764815d396beca2ed9c4d88002a26a7a98641 16112 cxref-emacs_1.6d-5_all.deb 95d624f49fc2a2585d48934c62b4038f0368e91c9990024d3b98680db5766e4e 511498 cxref_1.6d-5_i386.deb Files: e50d48714ea469ecf17c711bc8136832 1222 devel optional cxref_1.6d-5.dsc 8c4beea48b7c2154fe001baec7e632d8 32964 devel optional cxref_1.6d-5.debian.tar.gz 4e3bf7bdb1fae29f54a15e7f80ae4ded 787724 doc optional cxref-doc_1.6d-5_all.deb 668bd73daba00ff8828633a7519ac446 16112 editors optional cxref-emacs_1.6d-5_all.deb e57151ffab1e99b7b7956eae08505a8d 511498 devel optional cxref_1.6d-5_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlBsgsAACgkQczG1wFfwRdx74gCdFWq8G1AnZS1ZjLsIDrjDxEtV /qcAoKnLY8HFE04Zhxx+WBGfusQ8yWzb =v+y2 -----END PGP SIGNATURE-----
--- End Message ---