Your message dated Tue, 15 Apr 2014 22:19:12 +0000
with message-id <[email protected]>
and subject line Bug#714796: fixed in ferm 2.2-2
has caused the Debian Bug report #714796,
regarding ferm: modifies conffiles (policy 10.7.3): /etc/default/ferm
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
714796: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714796
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ferm
Version: 2.2-1
Severity: serious
User: [email protected]
Usertags: piuparts
Hi,
during a test with piuparts I noticed your package modifies conffiles.
This is forbidden by the policy, see
http://www.debian.org/doc/debian-policy/ch-files.html#s-config-files
10.7.3: "[...] The easy way to achieve this behavior is to make the
configuration file a conffile. [...] This implies that the default
version will be part of the package distribution, and must not be
modified by the maintainer scripts during installation (or at any
other time)."
Note that once a package ships a modified version of that conffile,
dpkg will prompt the user for an action how to handle the upgrade of
this modified conffile (that was not modified by the user).
Further in 10.7.3: "[...] must not ask unnecessary questions
(particularly during upgrades) [...]"
If a configuration file is customized by a maintainer script after
having asked some debconf questions, it may not be marked as a
conffile. Instead a template could be installed in /usr/share and used
by the postinst script to fill in the custom values and create (or
update) the configuration file (preserving any user modifications!).
This file must be removed during postrm purge.
ucf(1) may help with these tasks.
See also http://wiki.debian.org/DpkgConffileHandling
In https://lists.debian.org/debian-devel/2012/09/msg00412.html and
followups it has been agreed that these bugs are to be filed with
severity serious.
debsums reports modification of the following files,
from the attached log (scroll to the bottom...):
/etc/default/ferm
cheers,
Andreas
ferm_2.2-1.log.gz
Description: GNU Zip compressed data
--- End Message ---
--- Begin Message ---
Source: ferm
Source-Version: 2.2-2
We believe that the bug you reported is fixed in the latest version of
ferm, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Alexander Wirt <[email protected]> (supplier of updated ferm package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Tue, 15 Apr 2014 23:53:56 +0200
Source: ferm
Binary: ferm
Architecture: source all
Version: 2.2-2
Distribution: unstable
Urgency: medium
Maintainer: Alexander Wirt <[email protected]>
Changed-By: Alexander Wirt <[email protected]>
Description:
ferm - maintain and setup complicated firewall rules
Closes: 714796
Changes:
ferm (2.2-2) unstable; urgency=medium
.
* [139cabd] Do not unconditionally overwrite ENABLED= in /etc/default/ferm.
Thanks to Christian Kastner for the patch (Closes: 714796)
Checksums-Sha1:
73bf6f2528b979566fe9fa4a25424d417644ff8a 1744 ferm_2.2-2.dsc
4118320a25586a7d3c8c88de9b26e24fab11c5ff 15412 ferm_2.2-2.diff.gz
84e07b9d81f4b96410c47a69206771e63ba214f8 104744 ferm_2.2-2_all.deb
Checksums-Sha256:
343c516ca9cc07d74b741007d48058b19b7ada99c63c9b855ffa4f7c9a2bca00 1744
ferm_2.2-2.dsc
62cb4e120b1b8cf8923b411eb806badc6e749f28090459b0366331721b7a94cf 15412
ferm_2.2-2.diff.gz
6375cecf758bc51bfadf8049af11148313715659c5968b4aafb9bd97c23498ce 104744
ferm_2.2-2_all.deb
Files:
f8c721b184680ff4ad0e8393aa3ddd31 1744 net optional ferm_2.2-2.dsc
d434a18b824c7a522c773693133f4ae4 15412 net optional ferm_2.2-2.diff.gz
847141bfc9f0d1b3832e9b427794d6e7 104744 net optional ferm_2.2-2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBAgAGBQJTTa4sAAoJEB5F+Mqd4jsWVhAP/R9BQ60UsZ7vfY1cFjMiVMfr
PypaVfr61HUI4gnUMbVvWSUJcjMjYXYBy7ctKA6CXesRHpSh4TUgdcu2q6VOrgYr
NCkFkzhewtZkFX0cXq+AQggWvZVLrl6GDQGnr7Vp6C1ZEmo7G7MTct6AgmOi6DRw
vH2Z1uw1mK8E/+7j4aIk1mJHjebWnC32gyt6xEq9HjCJMJxtz5kdIgMbTupYV8WX
RfxECl9c26vJLiotEqdMiOeGlQOdb3r53i56biVclXdmidnc6b9uRTsJNOfpEYMu
+9JNiTtoJpRAYzxNsGs6h/OLAW0HwXsUdAcUm1ghOWb883ItbSZcu35OClMFxLqj
B898SPcJrFJFvwqRMium8rxMnetmX6rX3PvohnR/YQ6AOB+32B990mISCvxl2yoh
bnC6ez1WMWEkjqV68PBIRs+s5bf4sIlzoEG0m/pUsg9t2/r7FnASBxW3+8WPlJNZ
6Sg9fqh41hgrl23do3gUee9WId3IHANRuEFGJbtbJuTp0N3S3lSXYTiQgxMos2cj
swpZen4kNGhrxXcp0Rs8b+p6A7Z8Bb8Z7ItrtczKuXPxJA2C1sdl27dRwDmL56a0
AMUSApcS++BBFp3kDS9IYrPEXJKfjO3utxaGP+hXW/uzJu21mEtPsvA//Wi43hgo
WH56kpDS0cVRtlKEGyeS
=Oc4k
-----END PGP SIGNATURE-----
--- End Message ---
