Bug#1022260: caddy: Leaves user, group, directories behind even after purge

[Peymaneh]

Hi,

thanks for reporting

even if there is no definitive policy regardind the purging of system 
users, there is at least strong concerns against this because of 
security considerations[1], so for now I won't change the behaviour


But I agree that the directories should be removed, I have uploaded a 
fix addressing this


Peymaneh

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=228692


OpenPGP_signature
Description: OpenPGP digital signature

Bug#1022260: caddy: Leaves user, group, directories behind even after purge

[Nelson A. de Oliveira]

Package: caddy
Version: 2.4.6-2
Severity: minor
X-Debbugs-Cc: nao...@gmail.com

Even after purging caddy it leaves:

- /var/lib/caddy with data
- an empty /var/log/caddy
- a 'caddy' user (in /etc/passwd)
- a 'caddy' group (in /etc/group)

I guess that such things should also be removed if we purge the package.

Thank you!

Best rergards,
Nelson

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (100, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.0.0-1-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8), 
LANGUAGE=pt_BR:pt:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

-- Configuration Files:
/etc/caddy/Caddyfile [Errno 2] Arquivo ou diretório inexistente: 
'/etc/caddy/Caddyfile'

-- no debconf information