Package: dhelp Version: 0.6.19 Severity: normal Tags: patch -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
The postrm script removes directory /etc/dhelp. However this directory is not created by the package during install since lenny (the last version I could find which did, is 0.5.24 in etch). Thus /etc/dhelp is from quite a long time ago a "free path". It is thus conceivable that an administrator could create (as part of a custom config or for whatever reason) that directory inside /etc and populate it with data. Upon removal of dhelp that directory and all data inside it would unknowingly be deleted without question. How small this possibility is, it is nevertheless a bad thing for a package to do, IMHO. The attached patch solves this issue. regards George Zarkadas - -- System Information: Debian Release: 6.0.2 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500, 'stable'), (450, 'testing-proposed-updates'), (450, 'testing'), (400, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores) Locale: LANG=el_GR.utf8, LC_CTYPE=el_GR.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages dhelp depends on: ii doc-base 0.9.5 utilities to manage online documen ii libcommandline-ruby1 0.7.10-10 Ruby library to write command-line ii libdata-page-perl 2.02-1 Help when paging through sets of r ii libdb-ruby1.8 0.6.5-6 Interface to Berkeley DB for Ruby ii libgettext-ruby1.8 2.1.0-2.1 Gettext for ruby1.8 ii libhtml-parser-perl 3.66-1 collection of modules that parse H ii liblocale-gettext-pe 1.05-6 Using libc functions for internati ii libtemplate-perl 2.22-0.1 template processing system written ii liburi-perl 1.54-2 module to manipulate and access UR ii perl-modules 5.10.1-17squeeze2 Core Perl modules ii poppler-utils 0.12.4-1.2 PDF utilitites (based on libpopple ii pstotext 1.9-5 Extract text from PostScript and P ii ruby1.8 1.8.7.302-2squeeze1 Interpreter of object-oriented scr ii swish++ 6.1.5-2 Simple Document Indexing System fo Versions of packages dhelp recommends: ii epiphany-browser [www-browser 2.30.6-1 Intuitive GNOME web browser ii iceweasel [www-browser] 3.5.16-9 Web browser based on Firefox ii w3m [www-browser] 0.5.2-9 WWW browsable pager with excellent Versions of packages dhelp suggests: ii apache2-mpm-prefork [h 2.2.16-6+squeeze3 Apache HTTP Server - traditional n ii catdvi 0.14-11+b1 DVI to plain text translator ii html2text 1.3.2a-15 advanced HTML to text converter ii info2www 1.2.2.9-24 Read info files with a WWW browser ii man2html 1.6f+repack-1 browse man pages in your web brows ii w3m 0.5.2-9 WWW browsable pager with excellent - -- no debconf information -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJOeSZMAAoJEJWXIVmJ5BwW1N0H/jk9OZefmiw1IqTOewUK/bD1 hDFRpJKzC71rGrN0WR3zaJN9pN2/CaFcDjjWSsUUZ1bV1Hv4XZ+328GPTqtcykKq f6LRX3PoV/sFbscB7bcgq+Ir1AYpV7JxC+MmhBfBtHJGytZnKFVzoKOECrwlcBCs MyeL9fU4oJ8jeELT8nxNRyo4ebsv4aCIQNj0hdYLYtb6xEauPklHnpPWS+CBTBkQ Uc9vr8s+CCk52iil1D8vjptzhjiygqaKDuJRGFTVNVLaGr4vdVSib8LLIJK05gLR t11HbhSfDTQewdBHU3Cj4ehqK6v1Lh2wKitzG6OA8S9U/VfG84efhuLrnyfdqMc= =wR3S -----END PGP SIGNATURE-----
--- a/debian/postrm +++ b/debian/postrm @@ -17,9 +17,4 @@ # Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, # MA 02111-1307 USA. -if [ "$1" = purge ]; then - # remove files generated by postinst - rm -rf /etc/dhelp -fi - #DEBHELPER#
