Source: hylafax
Source-Version: 3:6.0.6-8
Severity: important
User: debian-d...@lists.debian.org
Usertags: dpkg-db-access-blocker
Hi!
This package contains a maintainer script [M], which directly accesses
the dpkg internal database.
[M] debian/hylafax-server.postinst
This a problem for multiple reasons. Even though the layout and format
of the dpkg database is administrator friendly, and it's expected that
those might need to mess with it, in case of emergency, this interface
does not extend to other programs besides the dpkg suite of tools. The
admindir can also be configured differently at dpkg build or run-time.
And finally, the contents and its format, will be changing in the near
future.
Please, switch to use the public interface to fetch the conffiles list
for any package «dpkg-query -f '${Conffiles}\n' -W <pkgname>», instead
of accessing the database directly, because the .conffiles files never
get updated even after conffile take overs by another package, and the
.md5sums files never contain conffile references. Or simply remove the
affected code snippet if it's not relevant anymore.
Thanks,
Guillem
