* Christoph Anton Mitterer: > The problem is, apparently it once used to be a conffile, right?
Yes, it once was a conffile. > And on legacy systems it still is marked as such, even though you > create it now manually. Odd. Could you check the contents of /var/lib/dpkg/status and what is listed there for the debsecan package? I didn't expect the Conffile: entries to be sticky, and nothing in the documentation about conffile handling says they are. > AFAIU, the conffile should be backuped, then removed with dpkg- > maintscript-helper and the backup then moved back manually, to clean > things up. I don't see anything in dpkg-maintscript-helper which would remove the Conffile: lines from /var/lib/dpkg/status, so if they are still there on your system, this probably would not make a difference.