Package: ca-certificates
Version: 20250419
Severity: wishlist
User: [email protected]
Usertags: dh-usrlocal
Prompted by recent changes in fontconfig's handling of
/usr/local/share/fonts, I noticed that ca-certificates' postinst has an
open-coded script to create /usr/local/share/ca-certificates with
Policy-compliant permissions.
Please consider using dh_usrlocal(1) for this: that way, any implementation
bugs can be fixed centrally in debhelper, and they will take effect in
all packages that use dh_usrlocal at the next rebuild.
The procedure to do that is something like this:
1. create debian/ca-certificates/usr/local/share/ca-certificates, for
example in debian/ca-certificates.dirs or with some `install -d`
in d/rules
2. make sure dh_usrlocal is run (normally dh will run it automatically)
3. remove open-coded logic in maintainer scripts to create and remove
this directory
4. make sure the maintainer scripts still have the #DEBHELPER#
placeholder
With that done, dh_usrlocal should insert maintainer script snippets
generated from /usr/share/debhelper/autoscripts/ to create and remove
the directory when appropriate.
Thanks,
smcv
