Your message dated Sat, 22 Feb 2014 21:23:33 +0000 with message-id <e1whk2n-0001mk...@franck.debian.org> and subject line Bug#710903: fixed in maradns 2.0.09-1 has caused the Debian Bug report #710903, regarding maradns: modifies conffiles (policy 10.7.3): /etc/maradns/mararc to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 710903: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710903 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: maradns Version: 2.0.06-2 Severity: serious User: debian...@lists.debian.org Usertags: piuparts Hi, during a test with piuparts I noticed your package modifies conffiles. This is forbidden by the policy, see http://www.debian.org/doc/debian-policy/ch-files.html#s-config-files 10.7.3: "[...] The easy way to achieve this behavior is to make the configuration file a conffile. [...] This implies that the default version will be part of the package distribution, and must not be modified by the maintainer scripts during installation (or at any other time)." Note that once a package ships a modified version of that conffile, dpkg will prompt the user for an action how to handle the upgrade of this modified conffile (that was not modified by the user). Further in 10.7.3: "[...] must not ask unnecessary questions (particularly during upgrades) [...]" If a configuration file is customized by a maintainer script after having asked some debconf questions, it may not be marked as a conffile. Instead a template could be installed in /usr/share and used by the postinst script to fill in the custom values and create (or update) the configuration file (preserving any user modifications!). This file must be removed during postrm purge. ucf(1) may help with these tasks. See also http://wiki.debian.org/DpkgConffileHandling In https://lists.debian.org/debian-devel/2012/09/msg00412.html and followups it has been agreed that these bugs are to be filed with severity serious. debsums reports modification of the following files, from the attached log (scroll to the bottom...): /etc/maradns/mararc cheers, Andreas
maradns_2.0.06-2.log.gz
Description: GNU Zip compressed data
--- End Message ---
--- Begin Message ---Source: maradns Source-Version: 2.0.09-1 We believe that the bug you reported is fixed in the latest version of maradns, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 710...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Dariusz Dwornikowski <dariusz.dwornikow...@cs.put.poznan.pl> (supplier of updated maradns package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 16 Feb 2014 19:36:04 +0100 Source: maradns Binary: maradns maradns-zoneserver maradns-deadwood duende maradns-docs Architecture: source amd64 all Version: 2.0.09-1 Distribution: unstable Urgency: medium Maintainer: Dariusz Dwornikowski <dariusz.dwornikow...@cs.put.poznan.pl> Changed-By: Dariusz Dwornikowski <dariusz.dwornikow...@cs.put.poznan.pl> Description: duende - logging daemonizer maradns - simple security-focused authoritative Domain Name Service server maradns-deadwood - simple security-focused recursive Domain Name Service server maradns-docs - upstream documentation for the MaraDNS Domain Name Service server maradns-zoneserver - complementary server process to TCP functions for MaraDNS Closes: 701657 709826 710903 739084 739755 Changes: maradns (2.0.09-1) unstable; urgency=medium . * New maintainer (Closes: #739084) * New upstream release to unstable * Several security bugs (Closes: #739755) - security bugfix for CVE-2011-5055, CVE-2011-5056, CVE-2012-0024, CVE-2012-1570 - security bugfix agains blind spoofing attack (no CVE number) - security bugfix for packet of death attack (no CVE number) * Bump standards to 3.9.5 * Updated d/postinst to no longer modify conffiles (Closes: #710903) * Init script fixed (Closes: #709826) * --reinstall no longer kills the process (Closes: #701657) * Updated old d/changelog entries, added information when the CVEs were fixed: 2.0.06-1, 2.0.04-1, 1.4.11-1, 1.2.12.06-1, 1.2.12.05-1, 1.0.28-1 Checksums-Sha1: 845845051969b89d64c9adbfb5fb728ed3f8d311 2045 maradns_2.0.09-1.dsc d60aaca80400fb4787856afaf40534aebf16c45e 1089174 maradns_2.0.09.orig.tar.bz2 93492cec868b7e38306c64b4a6bacd8cf0320bde 36260 maradns_2.0.09-1.debian.tar.xz 9c834d273e6fe22071cb02d91485367366a39590 237266 maradns_2.0.09-1_amd64.deb 25f9bc836cd3429d18b3e81b6ef8aeba15606643 139228 maradns-zoneserver_2.0.09-1_amd64.deb e61c6f51b14f9ea4b21dabbe38bf07f554eddbd1 120328 maradns-deadwood_2.0.09-1_amd64.deb 01f9074867256de7bf1f794c99478f2d24143e19 70866 duende_2.0.09-1_amd64.deb cdc65337d4f1f94380ffff2196026b37b0630364 179670 maradns-docs_2.0.09-1_all.deb Checksums-Sha256: be272ae3706429f6bf53937d158a34fa19056a68664d9940cb2c18b2475fcb93 2045 maradns_2.0.09-1.dsc d444927b0f2cd39485e936b0d120c93651807c0f598769b2a09ff5da08006604 1089174 maradns_2.0.09.orig.tar.bz2 12f87cf2eaab3628c33fd016291eba8f75728dfe334817ebacc8641ed2ceb62c 36260 maradns_2.0.09-1.debian.tar.xz 2c676da1acccd3d6055c281701461efd2966f756d5d1c2efdfaa245da4f89506 237266 maradns_2.0.09-1_amd64.deb 70ec6ecbe8f50e7536ded2dce1ce886288b80d48b443248dd4f5ad61c5675699 139228 maradns-zoneserver_2.0.09-1_amd64.deb 01e5cc4769d599d6fdfd5cf9e0ad5656f3f3369eefe0cf22539c98db669a7648 120328 maradns-deadwood_2.0.09-1_amd64.deb 5fcb30d37a5173a2d15542dbfb7ce68510aa292c0e0f200955f18c08502f0376 70866 duende_2.0.09-1_amd64.deb 4908367c1fbdc97fad6a930b8d0d38efeed5f3d21eaae00fcb4bb2e267111dcf 179670 maradns-docs_2.0.09-1_all.deb Files: eb22c59c9b139f8cb599e57267300cea 2045 net extra maradns_2.0.09-1.dsc 62895700989faad52397cc5571bee9b4 1089174 net extra maradns_2.0.09.orig.tar.bz2 3f8792f64c9eeb7f3af11ed24e5d3575 36260 net extra maradns_2.0.09-1.debian.tar.xz 9dd36dec819d09b2c33235b0dd72eadc 237266 net extra maradns_2.0.09-1_amd64.deb b1c8825b40de5be12bd5fcac1c91047c 139228 net extra maradns-zoneserver_2.0.09-1_amd64.deb 45c61874a564f140df58d09f5bdb5a66 120328 net extra maradns-deadwood_2.0.09-1_amd64.deb b42e7dd9f7cec55c2e56bc36b7702f8e 70866 admin optional duende_2.0.09-1_amd64.deb b6f4a6f8d7338b684d24ead1f985d18e 179670 doc extra maradns-docs_2.0.09-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJTCQQrAAoJEJvS1kCaDFL6K3IQAMGDZiweUav4N2PNmFu3BzeV cHhxpTY9AHYSJ78YDPwzR4DLLK7UvQy6ObHw0zbS+nJqvxxpFklEOVpAw23Zwzs+ RPm4PvrLus+Ls8cnZtr6nMyPGP/iFieyaNrzBKQd9UGiKZR8WLv1InN68Fnh+quP RP4fE+bkblbJLe15DMfJKw4kIiMq7AHjRYjVJiep0DOijqL/fmEWzYmaTgkjv/hG mbQBTCX5og7I4K+BGj5osrpPGYNtmRWNeEpTyJfZs/JCdvj7W0Dc+neQqnOiFgx6 FSFLMT4CcI8DYiSJhBLDLmNaDgMcb1rEgRP4dfAtBi47hjQubLNjcz2zJT7CKuo1 3RHkmaVrSqkP64vsnEiaMjKfNhGnrbRvv/DxxpCKN2/7Sfke5rXQItrrQQk1H2bn 0WtvnvB9HpyQP8hqg2nqq6PBTLsjwYJdWy8hW+vUlCplEYxxkytoC5SOhXz+rolJ 1vJqneC+UFiyeUnzPrAeyF/FCBdkojy+yEOMAV7UL7YyTTU8mmTDUuga7hW57eGw vJ29yj/y7ih7Uq4C9mxRj3e93kEJwpc3SxNnj4auRKUoFQZ2p60XFVxDwpuEVHSj IJSZ8cekyKCVr4OiUvWo43u5JUH+RLTqmw/F0JIsZ3cAykyn99Fpyml/w7isQNdg l6BM9bBNNX9Q7gby65j7 =BkUU -----END PGP SIGNATURE-----
--- End Message ---
