Your message dated Sat, 11 Apr 2020 18:05:12 +0000 with message-id <e1jnkve-000gcr...@fasolo.debian.org> and subject line Bug#950080: fixed in kwartz-client 1.5-1 has caused the Debian Bug report #950080, regarding kwartz-client: modifies conffiles (policy 10.7.3): /etc/kwartz-cloud.conf to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 950080: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=950080 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: kwartz-client Version: 1.4-5 Severity: serious User: debian...@lists.debian.org Usertags: piuparts Hi, during a test with piuparts I noticed your package modifies conffiles. This is forbidden by the policy, see https://www.debian.org/doc/debian-policy/ch-files.html#configuration-files 10.7.3: "[...] The easy way to achieve this behavior is to make the configuration file a conffile. [...] This implies that the default version will be part of the package distribution, and must not be modified by the maintainer scripts during installation (or at any other time)." Note that once a package ships a modified version of that conffile, dpkg will prompt the user for an action how to handle the upgrade of this modified conffile (that was not modified by the user). Further in 10.7.3: "[...] must not ask unnecessary questions (particularly during upgrades) [...]" If a configuration file is customized by a maintainer script after having asked some debconf questions, it may not be marked as a conffile. Instead a template could be installed in /usr/share and used by the postinst script to fill in the custom values and create (or update) the configuration file (preserving any user modifications!). This file must be removed during postrm purge. ucf(1) may help with these tasks. See also https://wiki.debian.org/DpkgConffileHandling In https://lists.debian.org/debian-devel/2012/09/msg00412.html and followups it has been agreed that these bugs are to be filed with severity serious. debsums reports modification of the following files, from the attached log (scroll to the bottom...): /etc/kwartz-cloud.conf cheers, Andreas
kwartz-client_1.4-5.log.gz
Description: application/gzip
--- End Message ---
--- Begin Message ---Source: kwartz-client Source-Version: 1.5-1 Done: Georges Khaznadar <georg...@debian.org> We believe that the bug you reported is fixed in the latest version of kwartz-client, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 950...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Georges Khaznadar <georg...@debian.org> (supplier of updated kwartz-client package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 11 Apr 2020 19:33:12 +0200 Source: kwartz-client Architecture: source Version: 1.5-1 Distribution: unstable Urgency: medium Maintainer: Georges Khaznadar <georg...@debian.org> Changed-By: Georges Khaznadar <georg...@debian.org> Closes: 950080 956409 Changes: kwartz-client (1.5-1) unstable; urgency=medium . * new upstream * removed the weird configuration which modifies config files from other packages without telling the user what is made. Closes: #950080 * put in the command kwartz-client-conf the script which was previously in debian/kwartz-client.postinst * applied Markus Hiereth's patch: Closes: #956409 Checksums-Sha1: c1749e1d8313beee702f2a36f43d7d0c4234043a 1888 kwartz-client_1.5-1.dsc cc208eb51befe6f0c50dbe37b6d2bb983bd646cf 253740 kwartz-client_1.5.orig.tar.xz 3dd179cb1e7f5ecf25511f9d57e3ef28892e3016 10032 kwartz-client_1.5-1.debian.tar.xz fe043c96b2c00c90c438eb1e59c04b9dbc6ad17a 5525 kwartz-client_1.5-1_source.buildinfo Checksums-Sha256: 6355dd2402717d75fedbf44566a792edfde356ece7c4cdb9d272b6c36a2b7c90 1888 kwartz-client_1.5-1.dsc 56b2ca532d7b2aef31c375dd802c287f2b96ed4c801094beb2c442079c3186d4 253740 kwartz-client_1.5.orig.tar.xz fadaa8ebfa228f12d8368f38345345f7d5c22d8715118db232a27b34ab0bb8f5 10032 kwartz-client_1.5-1.debian.tar.xz 77261548599a9d5f731f0721c466b00a2fc2c0ec29a8ce53dd241d38de9482af 5525 kwartz-client_1.5-1_source.buildinfo Files: 79c9393bec884b384ee8785971bfb349 1888 admin optional kwartz-client_1.5-1.dsc 6dcb0dd85bbc2ef0f3ae674b41e38649 253740 admin optional kwartz-client_1.5.orig.tar.xz c6912ac27a229fae903b24c8bba7ada4 10032 admin optional kwartz-client_1.5-1.debian.tar.xz 784ca4ef86d89535ee9b7c9d89696941 5525 admin optional kwartz-client_1.5-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEM0CzZP9nFT+3zK6FHCgWkHE2rjkFAl6SAWgUHGdlb3JnZXNr QGRlYmlhbi5vcmcACgkQHCgWkHE2rjkSvQ//TQGb4weClw7uKoHmK2irVXpOHbAS kQlbgeJzvkzaxj/jiWRRvwqtXEYfqOtp7uOjBBgVsi4IbB1kMSEFpbqLjTZnvtd2 LfXzLoCI8vqvthPmuSgnz4uUZ5jdYxZ3X8wIAGPGWC8/Bwf6JMegTsod+/s/L2S2 1MIOPVJbPgUxWBkv3bnjpK1dxS8etNQ62WoLmuK4dEbfgLYGgoSOlvjVw9Yb8DRZ RRZAdW0KCZbHtdWeYNGlm40gLA1E9YFZohqaY4ScdOpCmZSfN8nrVp5RKIx0BZ4D y+aHVRy8pA84a5WRIYDSj0iHNa6YQzW/6bEBcZXW9jXZkgJs7xXCWUojAEQbO0v/ T0lg93Se3XH3bsTLbZsRlDUHywfPXL5DhFRYPudPYnDIB/3oAhjIUzTNo2B6/reG Z9nnu8pmW05Btl/nh1cCyi5RPKwuCe/ApWjLDQRbKeNXWzCr/mgkQcOxbU8WCpnX PkDgxaEMD2hRmOXfyfD3C+yheAEyFDPYLFi7OyqdaRNMdw3LsqMQySAFTxHz3rz9 W1Njxtz/H6pTm7SGk8yX+5A38LXzQrfCRrDNeWfF3bHtiVX0rRJrnTezpdekbKlq Qlc6TTaFLTD9VXTZA0H7CBQVqP+4450SnYFRCcPiKn2Auc0nA7slxvGcQPgh85rM quuJsTL55YMsTEE= =ytWN -----END PGP SIGNATURE-----
--- End Message ---
