Source: changetrack
Source-Version: 4.7-5
Severity: important
User: debian-d...@lists.debian.org
Usertags: dpkg-db-access-blocker

Hi!

This package contains a cron script [M], which directly accesses
the dpkg internal database. Instead of using one of the public
interfaces provided by dpkg. The code could be replaced with something
like «dpkg-query --showformat '${Conffiles}\n' --show |
grep -E -v '(^\s*|\.schemas)$' | cut -d\  -f2 | sort | uniq».

  [M] debian/cron.daily

This a problem for multiple reasons. Even though the layout and format
of the dpkg database is administrator friendly, and it's expected that
those might need to mess with it, in case of emergency, this interface
does not extend to other programs besides the dpkg suite of tools. The
admindir can also be configured differently at dpkg build or run-time.
And finally, the contents and its format, will be changing in the near
future.

In addition the .conffiles in the database never get updated even after
conffile take overs by another package.

Thanks,
Guillem

Reply via email to