Package: ejabberd Version: 18.03-1 Severity: serious Justification: Policy 10.7.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 The file /etc/default/ejabberd is registered as a conffile, but is also manipulated using ucf in postinst script. That is illegal, according to Policy ยง 10.7.3: > The easy way to achieve this behavior is to make the configuration > file a conffile. This is appropriate only if it is possible to > distribute a default version that will work for most installations, > although some system administrators may choose to modify it. This > implies that the default version will be part of the package > distribution, and must not be modified by the maintainer scripts > during installation (or at any other time). - Jonas -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAlrM9r8ACgkQLHwxRsGg ASELFxAAlE2hJjPNX1UAp309gifGF3ayh5Xvzbo2W+c3W5BMNz+xH4f83zoVmk2M 423gXz1IMO92fT+cy9NT5btCJAwQN9wKpqveM/cQLJoqq0MQcI8EyDAhEyXeEZ4r cu1XjbSbg8uN+5WEijEVlN7aQbPAscT8VlJcy68tdBLuwiL2mgNoGCHg7QgHLZkt WIYfuuaRosuQn82bo9pftrVjQZxswmcnYBTsf4FTnUGx0JjG5Vbce6vUtdHu4R1L ZeBCXtgaUp6h0apy+CF+7jE8cA/HtgUvIAR6QhciDXefvE3rhuK/cb+NNo4DaGfi /2/Hg2KaN0tzLRnniF4pZvZdLs6w9Qm0dTzSTeq/lQ8bpCv7/2EdBdIxTUTZyf5r IYP9Wb6JLgtzS16r6irYL1MGXtIzyj1Ll8MOf7d12A21wDacSyZbfp5wZ86QGEwK aGbiNNu937bg79smfTNO16G9D+glYTrpFJdFl6dULOnP9SMB5EAvCLeLk+8UqwYT yofc87VIuq0lLI5sSwwKCck30w/ovekB1bbGw4Y7e0/UxFdcZDkr5tPLRqjsNzM5 A8Dp9Jq0/IWr82prtSnf//AKbS/WEthsYuiLZfAldrBIrZWQf2+HX+Jnw0LRV7iS My8e7R8jA7o0j+aHkM4rjAi+te4kvekpYIVzFoBDXwhFDg88whc= =eXEr -----END PGP SIGNATURE-----
