Your message dated Fri, 08 Sep 2023 00:38:39 +0000 with message-id <e1qepwb-009b2x...@fasolo.debian.org> and subject line Bug#1041332: fixed in mrtg 2.17.10-10 has caused the Debian Bug report #1041332, regarding mrtg: modifies conffiles (policy 10.7.3): /etc/mrtg/mrtg.cfg to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 1041332: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1041332 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: mrtg Version: 2.17.10-5+deb12u1 Severity: serious User: debian...@lists.debian.org Usertags: piuparts Control: block 1040860 with -1 Hi, during a test with piuparts I noticed your package modifies conffiles. This is forbidden by the policy, see https://www.debian.org/doc/debian-policy/ch-files.html#configuration-files 10.7.3: "[...] The easy way to achieve this behavior is to make the configuration file a conffile. [...] This implies that the default version will be part of the package distribution, and must not be modified by the maintainer scripts during installation (or at any other time)." Note that once a package ships a modified version of that conffile, dpkg will prompt the user for an action how to handle the upgrade of this modified conffile (that was not modified by the user). Further in 10.7.3: "[...] must not ask unnecessary questions (particularly during upgrades) [...]" If a configuration file is customized by a maintainer script after having asked some debconf questions, it may not be marked as a conffile. Instead a template could be installed in /usr/share and used by the postinst script to fill in the custom values and create (or update) the configuration file (preserving any user modifications!). This file must be removed during postrm purge. ucf(1) may help with these tasks. See also https://wiki.debian.org/DpkgConffileHandling In https://lists.debian.org/debian-devel/2012/09/msg00412.html and followups it has been agreed that these bugs are to be filed with severity serious. debsums reports modification of the following files, from the attached log (scroll to the bottom...): /etc/mrtg/mrtg.cfg My impression is that the unmodified new conffile (from bookworm) gets overwritten with the unmodified old conffile (from bullseye), something that shouldn't happen. I'd suggest to withdraw the 2.17.10-5+deb12u1 bookworm-pu update and revisit that for the next point release (there is no time left to fix this properly before saturday). I have some idea how this could be solved better, but I need to try that first. cheers, Andreas PS: piuparts runs under DEBIAN_FRONTEND=noninteractive
mrtg_2.17.10-5+deb12u1.log.gz
Description: application/gzip
--- End Message ---
--- Begin Message ---Source: mrtg Source-Version: 2.17.10-10 Done: Joao Eriberto Mota Filho <eribe...@debian.org> We believe that the bug you reported is fixed in the latest version of mrtg, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1041...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Joao Eriberto Mota Filho <eribe...@debian.org> (supplier of updated mrtg package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 07 Sep 2023 12:07:07 -0300 Source: mrtg Architecture: source Version: 2.17.10-10 Distribution: unstable Urgency: medium Maintainer: Joao Eriberto Mota Filho <eribe...@debian.org> Changed-By: Joao Eriberto Mota Filho <eribe...@debian.org> Closes: 1039103 1041332 1041392 Changes: mrtg (2.17.10-10) unstable; urgency=medium . * Changed a debconf template to honor Debian Policy (10.7.3), not changing the place a conffile, discarding any user changes. Thanks to Andreas Beckmann <a...@debian.org>. Consequently: - debian/mrtg.config: changed a comment. - debian/mrtg.postinst: dropped the first conditional block, related to moving the /etc/mrtg.cfg to /etc/mrtg/. - debian/mrtg.templates: updated to show a specific message to users. Thanks to Justin B Rye <justin.byam....@gmail.com> for all help in debian-l10n-english list. - debian/po/: ran debconf-updatepo to update all templates. - Closes: #1039103, #1041332 * debian/po/: - de.po: updated translation to German. Thanks to Helge Kreutzmann <deb...@helgefjell.de>. (Closes: #1041392) - pt_BR.po: updated translation to Brazilian Portuguese. Checksums-Sha1: a1791beced7ddf887adbc06d92754f75d3e5cece 1958 mrtg_2.17.10-10.dsc 3df1f502715ce56eadc6268f036668c57c9eee48 34536 mrtg_2.17.10-10.debian.tar.xz 3fc7482d38e2901aab825f93a63146c2b36b6cb5 8297 mrtg_2.17.10-10_source.buildinfo Checksums-Sha256: d1880cd2975915f2de49e44b00f0ac8eee57ae68383c7fe9f072ae8291e392bf 1958 mrtg_2.17.10-10.dsc 270bdb3d05ceced260efea4a4563b83be85c2d05f8cb761b7ace9704a2aaee7f 34536 mrtg_2.17.10-10.debian.tar.xz abe72de0286e5d4b9f0e31775b6106d67d35eeb7acc333fb95543f1a328917bb 8297 mrtg_2.17.10-10_source.buildinfo Files: f8778f2a3ef33d121c5192819d8a55c1 1958 net optional mrtg_2.17.10-10.dsc d73d8d2ae867da45dc898a4741964a7f 34536 net optional mrtg_2.17.10-10.debian.tar.xz 934a9272d4f4608ae3a0a2d32f76afad 8297 net optional mrtg_2.17.10-10_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENX3LDuyVoBrrofDS3mO5xwTr6e8FAmT6Z/EACgkQ3mO5xwTr 6e+fXQ/+NGYZTn9tyqJEvZQhm5oWQ2ZAB8k5adDeRaVRYU5TnH8Xa0D68lBDImq4 amS0Gdu74tKfLoreRK1z+HSmEzJCWJuE1dotwMdxDKHi9+wYqLj1EAeTG42pr8RV k7d1IcTTi9mFt90nma35VkcBQbo/7t7UZJ2Vdbhp8zVBayRaeZqGqtkTFl9wMcEs SH9M5Nzt4jI3tWQHdzi0kOdCZG+7Or7DdHBBDHL74i+z8ykw0g7ISWGqfXolCqgB KSNGlDlbwD1MoyttTeNtRO0d4YON+QgEl9gRT8XA92U3f7CwPB8LtzFnTyvN/U0j bwKjkE6rQCFuHDHLiq8CirM3q9y/EthuqP4f1HKF/NRggy9DwnbxLnfDn56AABHc 4odY/tF/bLtn8UC2ELD7hcXqGUA2gWdAnsXh88Lhx5HT/vjEm4kyjx3icZ6JkWrY /kXCdWgEUauzonxhBCtP9wT9rZQQUGOtykJArr2m33SgkGdj8Hq9E+TIZyZtQLIc IrGutFDVLuNCd/wRctiS1Udpj7J9foAkaYhPXHdM/mEZfmPzhiEOSwq0OFG6szpR 3LfKb1kOa+WxXFP2Am8RKT8d7njA39336Mdi3kzYhTQgE23HUSCzgsZ49P72r3L/ Hp1vKYU3V8qRaF4hF4KfI4dHXbtSeMql7tWc9ri0rAt4mDqV8hc= =QLyy -----END PGP SIGNATURE-----
--- End Message ---
