Hi pabs!
On Tue, May 31, 2016 at 12:47:24PM +0800, Paul Wise wrote:
> The experimental version does not not deal with obsolete conffiles
> properly. Please use the dpkg-maintscript-helper support provided by
> dh_installdeb to remove these obsolete conffiles on upgrade.
>
[...]
>
> $ pkg=firejail ; adequate $pkg ; dpkg-query -W -f='${Conffiles}\n' $pkg |
> grep obsolete
> firejail: obsolete-conffile /etc/firejail/disable-mgmt.inc
> firejail: obsolete-conffile /etc/firejail/disable-secret.inc
> /etc/firejail/disable-mgmt.inc 50bda0b6c6837b0ee7409255b445037a obsolete
> /etc/firejail/disable-secret.inc 9372a028cb5e15d15d1a95aa55d4015a obsoleteThanks for reporting this issue. I understand that it is a problem that files are not cleaned up. But when they are not automatically removed, this means that the user has manually touched/modified them. The changes made either to the includes or to profiles could still be relevant and in use by some files, e.g. the user could be maintaining an extensive blacklist in disable-secret.inc. So even if they are no longer part of upstream's set of profiles, they might not be obsolete in all cases. Should they be removed anyway, even if there is the possibility that it breaks a manual configuration by the user? Regards, Reiner
signature.asc
Description: Digital signature
