Jumping into this bug... It would definitely help me to have one unattended-upgrades configuration that works without change across multiple Debian releases, even when I choose to stay behind the current stable for a while. The problem is, the archive/suite in Debian release files seems to be oldstable or stable, while ${distro_codename} is squeeze or wheezy. So there's nothing I can put in Allowed-Origins to track my current release.
I think the easiest fix would be to add something like ${distro_archive} with the current archive name. (I don't know where to get this from, though, since it's not part of lsb_release.get_distro_information().) A more flexible alternative would be to extend the Allowed-Origins syntax to allow matching on the codename and label of the release. For example, if you could match on the label "Debian-Security", you could really limit unattended-upgrades to security upgrades. (By the way, the Allowed-Origins entries like "${distro_id} ${distro_codename}-security"; seem to be meaningless for Debian and should probably be removed to reduce confusion.) Andrew -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org