Your message dated Sun, 22 Feb 2015 09:19:49 +0000
with message-id <[email protected]>
and subject line Bug#767815: fixed in qpsmtpd 0.94-2
has caused the Debian Bug report #767815,
regarding qpsmtpd: modifies conffiles (policy 10.7.3): /etc/qpsmtpd/plugins
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
767815: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=767815
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: qpsmtpd
Version: 0.94-1
Severity: serious
User: [email protected]
Usertags: piuparts

Hi,

during a test with piuparts I noticed your package modifies conffiles.
This is forbidden by the policy, see
http://www.debian.org/doc/debian-policy/ch-files.html#s-config-files

10.7.3: "[...] The easy way to achieve this behavior is to make the
configuration file a conffile. [...] This implies that the default
version will be part of the package distribution, and must not be
modified by the maintainer scripts during installation (or at any
other time)."

Note that once a package ships a modified version of that conffile,
dpkg will prompt the user for an action how to handle the upgrade of
this modified conffile (that was not modified by the user).

Further in 10.7.3: "[...] must not ask unnecessary questions
(particularly during upgrades) [...]"

If a configuration file is customized by a maintainer script after
having asked some debconf questions, it may not be marked as a
conffile. Instead a template could be installed in /usr/share and used
by the postinst script to fill in the custom values and create (or
update) the configuration file (preserving any user modifications!).
This file must be removed during postrm purge.
ucf(1) may help with these tasks.
See also http://wiki.debian.org/DpkgConffileHandling

If that file is some kind of a plugin registry
- it should live in /var
- it must be created by a script, not shipped
- ideally use dpkg triggers to update it

In https://lists.debian.org/debian-devel/2012/09/msg00412.html and
followups it has been agreed that these bugs are to be filed with
severity serious.

debsums reports modification of the following files,
from the attached log (scroll to the bottom...):

  /etc/qpsmtpd/plugins


cheers,

Andreas

Attachment: qpsmtpd_0.94-1.log.gz
Description: application/gzip


--- End Message ---
--- Begin Message ---
Source: qpsmtpd
Source-Version: 0.94-2

We believe that the bug you reported is fixed in the latest version of
qpsmtpd, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Devin Carraway <[email protected]> (supplier of updated qpsmtpd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 21 Feb 2015 23:50:17 -0800
Source: qpsmtpd
Binary: qpsmtpd
Architecture: source all
Version: 0.94-2
Distribution: unstable
Urgency: medium
Maintainer: Devin Carraway <[email protected]>
Changed-By: Devin Carraway <[email protected]>
Description:
 qpsmtpd    - Flexible SMTP daemon for network-level spam detection
Closes: 767815
Changes:
 qpsmtpd (0.94-2) unstable; urgency=medium
 .
   * Ship backwards-compatibility wrappers for check_ plugins.  See
     /usr/share/doc/qpsmtpd/README.check_plugins for migration
     instructions.  (Closes: #767815)
Checksums-Sha1:
 986dc1722415c218219c0bc4ab5fd54e6750d843 1629 qpsmtpd_0.94-2.dsc
 203d4a20bc6c9a39b1992ba1b65832ed2c730cd1 45380 qpsmtpd_0.94-2.debian.tar.xz
 f5a8ee5f55db05f21afd7320d3049555c89d3a4f 279282 qpsmtpd_0.94-2_all.deb
Checksums-Sha256:
 ca6c4b4de4329bdb7bc1fa1e07d12a23861dedc55e8ae4d7caeeb34bad6bd355 1629 
qpsmtpd_0.94-2.dsc
 0cd5230682793ae9c1e54050249f178337046f2949ccc5fa549cc158e82aedb9 45380 
qpsmtpd_0.94-2.debian.tar.xz
 e6461ff583d069cf9bd2a3e468081cf0ce88cf6078e1fb6c22eb60efa7909ea4 279282 
qpsmtpd_0.94-2_all.deb
Files:
 a95a5e47668d2e13d877ae219d7d12a5 1629 mail extra qpsmtpd_0.94-2.dsc
 dbf5f3365a7022fb6c00f5a7ddb6bb48 45380 mail extra qpsmtpd_0.94-2.debian.tar.xz
 cad4e76981a53edf8e2d37637de2f886 279282 mail extra qpsmtpd_0.94-2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=7RDl
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to