Bug#1001009: Downloads external files on install

[Nilesh Patra]

Hi Tong,

On 12/12/21 1:06 AM, Tong Sun wrote:

Thank you Nilesh for such detailed explanation. Weighted on all the
options, I decided it still needs to go to contrib and have put a note
in d/README.Debian --
https://salsa.debian.org/debian/dbab/-/commit/fa771322e1342c532637e17baa863cca8ac80488


You reasoning looks okay to me, since you know the package better, I would 
simply agree.

However suggestions from my end: maybe it'd be a bit better to add the 
information about conffiles and change to contrib
in d/NEWS instead, so the user/system administrator actually sees it.
You could also trigger some script to manually remove the leftover conffiles, 
as I said on the other email, take a look here[1]
However, they are not a very high prio.

[1]: https://wiki.debian.org/DpkgConffileHandling


Now everything is updated on salsa for the final release. Please
double check, and let me know if I need to do anything else.


I made a few checks, fair enough. I just uploaded to NEW.
If at all there is something important missing, we could fix it later. Plenty 
of time :-)


Thanks a lot for all your help!


Thanks to _you_ for your work on this!

Regards,
Nilesh




OpenPGP_signature
Description: OpenPGP digital signature

Bug#1001009: Downloads external files on install

[Tong Sun]

On Sat, Dec 11, 2021 at 12:39 AM Nilesh Patra wrote:

> >*from* https://wiki.debian.org/piuparts/FAQ
>
> Yeah. Or maybe try to manually upgrade in a buster chroot, and see what 
> happens.

The dbab can upgrade from oldstable (Buster) just fine, but I had some problem
removing the outdated conffile files, as we had discussed in the other
thread. So,

As I know that the people that will be upgrading from buster can be
counted using a single hand, so I decided to put a note in
d/README.Debian instead. See
https://salsa.debian.org/debian/dbab/-/commit/a8fe8295cafa7506ad87b7f8a726325d45a3a335

> On Fri, Dec 10, 2021 at 05:05:03PM -0500, Tong Sun wrote:
> > dbab moving to contrib is because of this Bug#1001009. I personally have no
> > idea, but as requested by Andrey.
> >
> > I guess it is about this line that is called from the postinst script
> > https://salsa.debian.org/debian/dbab/-/blob/master/bin/dbab-get-list#L21
> >
> > Here is the recap of what he had said in this thread before:
> >
> > If the package cannot function without this or similar unpackaged file, it
> > > should be moved to contrib. If it can, the downloading should be done by
> > > the
> > > user/administrator.
>
> OK, it looks like because of this line:
>
> https://salsa.debian.org/debian/dbab/-/blob/master/bin/dbab-get-list#L21
>
> It tries to curl something. Now, two questions+suggestions.
>
> Agreeing with wrar on this point 1:
> 1. Is the data non-free?
>- If so, is it a hard requirement to download that data for package to 
> function?
>   Can sys admins not manually get this?
>   -> If it is a hard-bound need, then it should be moved to contrib
>   -> If not a hard-bound need, just mention downloading this in d/NEWS to 
> inform the sys admin.
>  This was it can continue to stay in free section (major benefit)
>
> * Is the data free software?
>- If so, is it a hard-bound/necessary need?
>  -> Now, if so, you can do something like this:
>  instead of pulling it in postinst, you could download it locally, 
> and put it in, say
>  a debian/resources directory, Simply install it to the needed 
> locations with a d/install.
>  This could serve as an example for you[1]. Only demerit is that you 
> might need to update
>  it when you do a new version, but it gives the benfit of keeping it 
> in main rather than contrib.
>  -> If not, same thingy, add a d/NEWS and ask sys admin.
>
> [1]: 
> https://salsa.debian.org/go-team/packages/golang-mvdan-editorconfig/-/commit/edf2d06b904bc45296080bed4acf2631dc2e9ece
>
> So, in a nutshell if the data is non-free and it is needed for the package to 
> function, we need to go ahead with contrib.
> Otherwise there are workarounds. Please let me know if that's the case, and 
> it really needs to go to contrib?

Thank you Nilesh for such detailed explanation. Weighted on all the
options, I decided it still needs to go to contrib and have put a note
in d/README.Debian --
https://salsa.debian.org/debian/dbab/-/commit/fa771322e1342c532637e17baa863cca8ac80488

copied below:

--

Moving to contrib
=

dbab moving to contrib is because of the Bug#1001009, first spotted by wrar
then consented by nilesh, as it needs to download external files in postinst,
which is not fit for main.

The data is free software, however it's a living and breathing one, thus using
a local copy (in package) means that

- it will almost always be outdated, and
- it will complicate the simple program & solution, and
- it will make the core content more than doubled in size (9828 + 130499)

The problem is initially spotted in 1.5.7-1 and get fixed in 1.5.7-2. Only
changing to contrib section is made in d/control file, nothing else is
changed, and the program behaves exactly as before.

--

Now everything is updated on salsa for the final release. Please
double check, and let me know if I need to do anything else.

Thanks a lot for all your help!

Bug#1001009: Downloads external files on install

[Nilesh Patra]

Hey Tong,

On Fri, Dec 10, 2021 at 05:05:03PM -0500, Tong Sun wrote:
> dbab moving to contrib is because of this Bug#1001009. I personally have no
> idea, but as requested by Andrey.
> 
> I guess it is about this line that is called from the postinst script
> https://salsa.debian.org/debian/dbab/-/blob/master/bin/dbab-get-list#L21
> 
> Here is the recap of what he had said in this thread before:
> 
> If the package cannot function without this or similar unpackaged file, it
> > should be moved to contrib. If it can, the downloading should be done by
> > the
> > user/administrator.

OK, it looks like because of this line:

https://salsa.debian.org/debian/dbab/-/blob/master/bin/dbab-get-list#L21

It tries to curl something. Now, two questions+suggestions.

Agreeing with wrar on this point 1:
1. Is the data non-free?
   - If so, is it a hard requirement to download that data for package to 
function?
  Can sys admins not manually get this?
  -> If it is a hard-bound need, then it should be moved to contrib
  -> If not a hard-bound need, just mention downloading this in d/NEWS to 
inform the sys admin.
 This was it can continue to stay in free section (major benefit)

* Is the data free software?
   - If so, is it a hard-bound/necessary need?
 -> Now, if so, you can do something like this:
 instead of pulling it in postinst, you could download it locally, and 
put it in, say
 a debian/resources directory, Simply install it to the needed 
locations with a d/install.
 This could serve as an example for you[1]. Only demerit is that you 
might need to update
 it when you do a new version, but it gives the benfit of keeping it in 
main rather than contrib.
 -> If not, same thingy, add a d/NEWS and ask sys admin.

[1]: 
https://salsa.debian.org/go-team/packages/golang-mvdan-editorconfig/-/commit/edf2d06b904bc45296080bed4acf2631dc2e9ece

So, in a nutshell if the data is non-free and it is needed for the package to 
function, we need to go ahead with contrib.
Otherwise there are workarounds. Please let me know if that's the case, and it 
really needs to go to contrib?

> I've asked some follow-up questions and his answer is enclosed *below*.
> 
> > Also, I would suggest to add the reasoning in d/README.Debian instead of
> the copyright
> > for making it easier to review for ftp masters.
> >
> > Additionally, have you checked with piuparts that the upgrade from buster
> indeed goes smooth?
> 
> Hmm, no. This is the first time I heard of piuparts
> 
> I did some search, but I got two 404 for the two most important thing that
> I need to read:
> 
> 
>1. piuparts itself has a README
>
>*from*
>
> https://wiki.debian.org/piuparts?action=fullsearch=180=dbab=Titles

We should probably report this to Holger. You can refer these links meanwhile

https://wiki.debian.org/piuparts/HowTos
https://salsa.debian.org/debian/piuparts/-/tree/develop/docs

>2. A package I'm interested in is in an untestable state. How can I find
>out if it would pass the piuparts test?
> 
>A) Run piuparts manually
>
> ,
>as described in that README.
> 
>*from* https://wiki.debian.org/piuparts/FAQ

Yeah. Or maybe try to manually upgrade in a buster chroot, and see what happens.

> Is it a done-online thing or I need to download something and try to learn
> how to use it?

Sorry, I don't what that's supposed to mean.

> > > Do you need me to upload to mentor first, you can totally take care of
> > > it from salsa?
> >
> > I will manage from salsa.
> 
> Thanks, I'll add the reasoning into d/README.Debian once things are settled.

Sure.

Regards,
Nilesh


signature.asc
Description: PGP signature

Bug#1001009: Downloads external files on install

[Tong Sun]

Bringing the discussion to the right track...

On Fri, Dec 10, 2021 at 4:13 PM Nilesh Patra  wrote:
>
> On 12/11/21 2:30 AM, Tong Sun wrote:
> > Oh, thanks a lot Nilesh!
> >
> > Everything is updated on salsa. pls double check, e.g.:
> >
> >
https://salsa.debian.org/debian/dbab/-/commit/4cd8db27cec918244a9fba3d698a7b0123c9f3f9
>
> Just one query: you reason for moving to contrib is not entirely clear to
me.
> You wrote here[2] that it installs external data after install, but I do
not see
> anything peculiar in the postinst script that does something of that sort
although I do not
> know much about this package.
>
> So could you elaborate on this thing? Just for my understanding.

dbab moving to contrib is because of this Bug#1001009. I personally have no
idea, but as requested by Andrey.

I guess it is about this line that is called from the postinst script
https://salsa.debian.org/debian/dbab/-/blob/master/bin/dbab-get-list#L21

Here is the recap of what he had said in this thread before:

If the package cannot function without this or similar unpackaged file, it
> should be moved to contrib. If it can, the downloading should be done by
> the
> user/administrator.


I've asked some follow-up questions and his answer is enclosed *below*.

> Also, I would suggest to add the reasoning in d/README.Debian instead of
the copyright
> for making it easier to review for ftp masters.
>
> Additionally, have you checked with piuparts that the upgrade from buster
indeed goes smooth?

Hmm, no. This is the first time I heard of piuparts

I did some search, but I got two 404 for the two most important thing that
I need to read:


   1. piuparts itself has a README
   
   *from*
   
https://wiki.debian.org/piuparts?action=fullsearch=180=dbab=Titles
   2. A package I'm interested in is in an untestable state. How can I find
   out if it would pass the piuparts test?

   A) Run piuparts manually
   
,
   as described in that README.

   *from* https://wiki.debian.org/piuparts/FAQ


Is it a done-online thing or I need to download something and try to learn
how to use it?

> > Do you need me to upload to mentor first, you can totally take care of
> > it from salsa?
>
> I will manage from salsa.

Thanks, I'll add the reasoning into d/README.Debian once things are settled.

Thanks again.

> > [1]:
https://salsa.debian.org/debian/dbab/-/commit/4cd8db27cec918244a9fba3d698a7b0123c9f3f9
> [2]:
https://salsa.debian.org/debian/dbab/-/commit/72ff079bc607b564966b24dc2ae598be4e8f5750


On Tue, Dec 7, 2021 at 10:57 AM Andrey Rahmatullin  wrote:
>
> On Sun, Dec 05, 2021 at 09:56:02AM -0500, Tong Sun wrote:
> > Thanks Andrey,
> >
> > Two questions,
> >
> > By "moved to contrib", did you meant to change
> >
> > Section: net
> >
> > to
> >
> > Section: contrib
> >
> > in d/control?
> Please read
> https://www.debian.org/doc/debian-policy/ch-archive.html#archive-areas and
> https://www.debian.org/doc/debian-policy/ch-archive.html#s-subsections
>
> > Now, let's define what "package cannot function" actually means. If
> > functions normally without this or similar unpackaged file, but the
> > program is completely data driven, i.e., no ads sites from the list
> > are blocked unless the list is there.
> >
> > So, strictly speaking, the package indeed cannot function without this
> > or similar unpackaged file, right? And the solution is just above,
> > right?
> I don't know the current project consensus on this, if it exists.
> If the software can only work with certain non-free files it should go
> into contrib, if OTOH it can work with some user-provided files, or with
> free files if those exist, it can stay in main. But downloading external
> files in postinst is certainly not fit for main.
>
> --
> WBR, wRAR

Processed: Re: Bug#1001009: Downloads external files on install

[Debian Bug Tracking System]

Processing control commands:

> tags -1 - moreinfo + pending
Bug #1001009 [dbab] Downloads external files on install
Removed tag(s) moreinfo.
Bug #1001009 [dbab] Downloads external files on install
Added tag(s) pending.

-- 
1001009: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001009
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#1001009: Downloads external files on install

[Tong Sun]

Control: tags -1 - moreinfo + pending
thanks

This should fix it
https://salsa.debian.org/debian/dbab/-/commit/4cd8db27cec918244a9fba3d698a7b0123c9f3f9

and the bug will be closed after a new release.


On Tue, Dec 7, 2021 at 10:57 AM Andrey Rahmatullin  wrote:
>
> On Sun, Dec 05, 2021 at 09:56:02AM -0500, Tong Sun wrote:
> > Thanks Andrey,
> >
> > Two questions,
> >
> > By "moved to contrib", did you meant to change
> >
> > Section: net
> >
> > to
> >
> > Section: contrib
> >
> > in d/control?
> Please read
> https://www.debian.org/doc/debian-policy/ch-archive.html#archive-areas and
> https://www.debian.org/doc/debian-policy/ch-archive.html#s-subsections
>
> > Now, let's define what "package cannot function" actually means. If
> > functions normally without this or similar unpackaged file, but the
> > program is completely data driven, i.e., no ads sites from the list
> > are blocked unless the list is there.
> >
> > So, strictly speaking, the package indeed cannot function without this
> > or similar unpackaged file, right? And the solution is just above,
> > right?
> I don't know the current project consensus on this, if it exists.
> If the software can only work with certain non-free files it should go
> into contrib, if OTOH it can work with some user-provided files, or with
> free files if those exist, it can stay in main. But downloading external
> files in postinst is certainly not fit for main.
>
> --
> WBR, wRAR

Bug#1001009: Downloads external files on install

[Andrey Rahmatullin]

On Sun, Dec 05, 2021 at 09:56:02AM -0500, Tong Sun wrote:
> Thanks Andrey,
> 
> Two questions,
> 
> By "moved to contrib", did you meant to change
> 
> Section: net
> 
> to
> 
> Section: contrib
> 
> in d/control?
Please read
https://www.debian.org/doc/debian-policy/ch-archive.html#archive-areas and
https://www.debian.org/doc/debian-policy/ch-archive.html#s-subsections

> Now, let's define what "package cannot function" actually means. If
> functions normally without this or similar unpackaged file, but the
> program is completely data driven, i.e., no ads sites from the list
> are blocked unless the list is there.
> 
> So, strictly speaking, the package indeed cannot function without this
> or similar unpackaged file, right? And the solution is just above,
> right?
I don't know the current project consensus on this, if it exists.
If the software can only work with certain non-free files it should go
into contrib, if OTOH it can work with some user-provided files, or with
free files if those exist, it can stay in main. But downloading external
files in postinst is certainly not fit for main.

-- 
WBR, wRAR


signature.asc
Description: PGP signature

Bug#1001009: Downloads external files on install

[Tong Sun]

Control: tags -1 + moreinfo
thanks

On Sun, Dec 5, 2021 at 8:23 PM Tong Sun wrote:
>
> On Sun, Dec 5, 2021 at 3:30 PM Tong Sun wrote:
> >
> > Hi Andrey,
> >
> > Would this fix the problem?
> > https://salsa.debian.org/debian/dbab/-/commit/40d960d7108051fc7ff07b1b4bbc8580722393c9
>
> W: dbab: unknown-section contrib
>
> Maybe not.
> So what exactly do you mean "moved to contrib", Andrey?
>
> > thx
> >
> > On Sun, Dec 5, 2021 at 9:56 AM Tong Sun
> >  wrote:
> > >
> > > Thanks Andrey,
> > >
> > > Two questions,
> > >
> > > By "moved to contrib", did you meant to change
> > >
> > > Section: net
> > >
> > > to
> > >
> > > Section: contrib
> > >
> > > in d/control?
> > >
> > > Now, let's define what "package cannot function" actually means. If
> > > functions normally without this or similar unpackaged file, but the
> > > program is completely data driven, i.e., no ads sites from the list
> > > are blocked unless the list is there.
> > >
> > > So, strictly speaking, the package indeed cannot function without this
> > > or similar unpackaged file, right? And the solution is just above,
> > > right?
> > >
> > > thx!
> > >
> > > On Thu, Dec 2, 2021 at 11:33 AM Andrey Rahmatullin  
> > > wrote:
> > > >
> > > > Package: dbab
> > > > Version: 1.3.2-1
> > > > Severity: serious
> > > >
> > > > The package runs `dbab-get-list` in postinst, which downloads
> > > > http://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq=0=plaintext
> > > >
> > > > If the package cannot function without this or similar unpackaged file, 
> > > > it
> > > > should be moved to contrib. If it can, the downloading should be done 
> > > > by the
> > > > user/administrator.
> > > >
> > > >
> > > > -- System Information:
> > > > Debian Release: bookworm/sid
> > > >   APT prefers unstable-debug
> > > >   APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 
> > > > 'unstable'), (500, 'testing'), (101, 'experimental')
> > > > Architecture: amd64 (x86_64)
> > > > Foreign Architectures: i386
> > > >
> > > > Kernel: Linux 5.15.0-1-amd64 (SMP w/4 CPU threads)
> > > > Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
> > > > TAINT_UNSIGNED_MODULE
> > > > Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), 
> > > > LANGUAGE not set
> > > > Shell: /bin/sh linked to /usr/bin/dash
> > > > Init: systemd (via /run/systemd/system)
> > > > LSM: AppArmor: enabled
> > > >
> > > > Versions of packages dbab depends on:
> > > > ii  bind9-dnsutils [dnsutils]  1:9.17.20-3
> > > > ii  curl   7.79.1-2
> > > > pn  dnsmasq
> > > > ii  perl   5.32.1-6
> > > >
> > > > dbab recommends no packages.
> > > >
> > > > dbab suggests no packages.

Processed: Re: Bug#1001009: Downloads external files on install

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + moreinfo
Bug #1001009 [dbab] Downloads external files on install
Added tag(s) moreinfo.

-- 
1001009: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001009
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#1001009: Downloads external files on install

[Tong Sun]

On Sun, Dec 5, 2021 at 3:30 PM Tong Sun wrote:
>
> Hi Andrey,
>
> Would this fix the problem?
> https://salsa.debian.org/debian/dbab/-/commit/40d960d7108051fc7ff07b1b4bbc8580722393c9

W: dbab: unknown-section contrib

Maybe not.
So what exactly do you mean "moved to contrib", Andrey?

> thx
>
> On Sun, Dec 5, 2021 at 9:56 AM Tong Sun
>  wrote:
> >
> > Thanks Andrey,
> >
> > Two questions,
> >
> > By "moved to contrib", did you meant to change
> >
> > Section: net
> >
> > to
> >
> > Section: contrib
> >
> > in d/control?
> >
> > Now, let's define what "package cannot function" actually means. If
> > functions normally without this or similar unpackaged file, but the
> > program is completely data driven, i.e., no ads sites from the list
> > are blocked unless the list is there.
> >
> > So, strictly speaking, the package indeed cannot function without this
> > or similar unpackaged file, right? And the solution is just above,
> > right?
> >
> > thx!
> >
> > On Thu, Dec 2, 2021 at 11:33 AM Andrey Rahmatullin  wrote:
> > >
> > > Package: dbab
> > > Version: 1.3.2-1
> > > Severity: serious
> > >
> > > The package runs `dbab-get-list` in postinst, which downloads
> > > http://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq=0=plaintext
> > >
> > > If the package cannot function without this or similar unpackaged file, it
> > > should be moved to contrib. If it can, the downloading should be done by 
> > > the
> > > user/administrator.
> > >
> > >
> > > -- System Information:
> > > Debian Release: bookworm/sid
> > >   APT prefers unstable-debug
> > >   APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 
> > > 'unstable'), (500, 'testing'), (101, 'experimental')
> > > Architecture: amd64 (x86_64)
> > > Foreign Architectures: i386
> > >
> > > Kernel: Linux 5.15.0-1-amd64 (SMP w/4 CPU threads)
> > > Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
> > > TAINT_UNSIGNED_MODULE
> > > Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), LANGUAGE 
> > > not set
> > > Shell: /bin/sh linked to /usr/bin/dash
> > > Init: systemd (via /run/systemd/system)
> > > LSM: AppArmor: enabled
> > >
> > > Versions of packages dbab depends on:
> > > ii  bind9-dnsutils [dnsutils]  1:9.17.20-3
> > > ii  curl   7.79.1-2
> > > pn  dnsmasq
> > > ii  perl   5.32.1-6
> > >
> > > dbab recommends no packages.
> > >
> > > dbab suggests no packages.

Bug#1001009: Downloads external files on install

[Tong Sun]

Hi Andrey,

Would this fix the problem?
https://salsa.debian.org/debian/dbab/-/commit/40d960d7108051fc7ff07b1b4bbc8580722393c9

thx

On Sun, Dec 5, 2021 at 9:56 AM Tong Sun
 wrote:
>
> Thanks Andrey,
>
> Two questions,
>
> By "moved to contrib", did you meant to change
>
> Section: net
>
> to
>
> Section: contrib
>
> in d/control?
>
> Now, let's define what "package cannot function" actually means. If
> functions normally without this or similar unpackaged file, but the
> program is completely data driven, i.e., no ads sites from the list
> are blocked unless the list is there.
>
> So, strictly speaking, the package indeed cannot function without this
> or similar unpackaged file, right? And the solution is just above,
> right?
>
> thx!
>
> On Thu, Dec 2, 2021 at 11:33 AM Andrey Rahmatullin  wrote:
> >
> > Package: dbab
> > Version: 1.3.2-1
> > Severity: serious
> >
> > The package runs `dbab-get-list` in postinst, which downloads
> > http://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq=0=plaintext
> >
> > If the package cannot function without this or similar unpackaged file, it
> > should be moved to contrib. If it can, the downloading should be done by the
> > user/administrator.
> >
> >
> > -- System Information:
> > Debian Release: bookworm/sid
> >   APT prefers unstable-debug
> >   APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 
> > 'unstable'), (500, 'testing'), (101, 'experimental')
> > Architecture: amd64 (x86_64)
> > Foreign Architectures: i386
> >
> > Kernel: Linux 5.15.0-1-amd64 (SMP w/4 CPU threads)
> > Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
> > TAINT_UNSIGNED_MODULE
> > Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), LANGUAGE 
> > not set
> > Shell: /bin/sh linked to /usr/bin/dash
> > Init: systemd (via /run/systemd/system)
> > LSM: AppArmor: enabled
> >
> > Versions of packages dbab depends on:
> > ii  bind9-dnsutils [dnsutils]  1:9.17.20-3
> > ii  curl   7.79.1-2
> > pn  dnsmasq
> > ii  perl   5.32.1-6
> >
> > dbab recommends no packages.
> >
> > dbab suggests no packages.

Bug#1001009: Downloads external files on install

[Tong Sun]

Thanks Andrey,

Two questions,

By "moved to contrib", did you meant to change

Section: net

to

Section: contrib

in d/control?

Now, let's define what "package cannot function" actually means. If
functions normally without this or similar unpackaged file, but the
program is completely data driven, i.e., no ads sites from the list
are blocked unless the list is there.

So, strictly speaking, the package indeed cannot function without this
or similar unpackaged file, right? And the solution is just above,
right?

thx!

On Thu, Dec 2, 2021 at 11:33 AM Andrey Rahmatullin  wrote:
>
> Package: dbab
> Version: 1.3.2-1
> Severity: serious
>
> The package runs `dbab-get-list` in postinst, which downloads
> http://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq=0=plaintext
>
> If the package cannot function without this or similar unpackaged file, it
> should be moved to contrib. If it can, the downloading should be done by the
> user/administrator.
>
>
> -- System Information:
> Debian Release: bookworm/sid
>   APT prefers unstable-debug
>   APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 
> 'unstable'), (500, 'testing'), (101, 'experimental')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
>
> Kernel: Linux 5.15.0-1-amd64 (SMP w/4 CPU threads)
> Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
> TAINT_UNSIGNED_MODULE
> Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), LANGUAGE not 
> set
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
>
> Versions of packages dbab depends on:
> ii  bind9-dnsutils [dnsutils]  1:9.17.20-3
> ii  curl   7.79.1-2
> pn  dnsmasq
> ii  perl   5.32.1-6
>
> dbab recommends no packages.
>
> dbab suggests no packages.

Bug#1001009: Downloads external files on install

[Andrey Rahmatullin]

Package: dbab
Version: 1.3.2-1
Severity: serious

The package runs `dbab-get-list` in postinst, which downloads
http://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq=0=plaintext

If the package cannot function without this or similar unpackaged file, it
should be moved to contrib. If it can, the downloading should be done by the
user/administrator.


-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 
'unstable'), (500, 'testing'), (101, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.15.0-1-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dbab depends on:
ii  bind9-dnsutils [dnsutils]  1:9.17.20-3
ii  curl   7.79.1-2
pn  dnsmasq
ii  perl   5.32.1-6

dbab recommends no packages.

dbab suggests no packages.