Control: severity -1 critical
On 2016-10-23 01:24 +0200, Marco d'Itri wrote:
> Control: severity -1 grave
>
> On Aug 27, Josh Triplett <j...@joshtriplett.org> wrote:
>
>> In order to fix this while preserving safe-rm's default of automatic
>> protection on installation, safe-rm will need to divert and replace
>> /bin/rm. This will require quite a bit of care to do safely; see dash's
>> maintainer scripts for a safe procedure.
> Merged /usr is the default since debootstrap 1.0.85, so the package
> is uninstallable on new systems.
It's worse than that. Because dpkg does not detect the file conflict
between coreutils' /bin/rm and safe-rm's /usr/bin/rm, the package is
installable but wreaks havoc, replacing the rm binary with its symlink.
Cheers,
Sven
