Package: inn
Version: 1:1.7.2q-36
Severity: critical
Justification: causes serious data loss

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

inn.postrm will do

clean_var_lib() {
  echo "Purging active file and history data..."
  rm -f /var/lib/news/active* /var/lib/news/history* \
    /var/lib/news/newsgroups
  if [ -d /var/lib/news/ ]; then
    rmdir --ignore-fail-on-non-empty /var/lib/news/
  fi
}

on both "remove" and "purge".

This causes the active file and history data to be lost unless the user
manually made a backup prior to removing inn.  The files contain valuable
data which cannot easily be reconstructed.  Debian users do expect such
important state to be kept unless a package is purged.  Deleting the files
on package removal will cause serious data loss for any user who
haven't read inn.postrm

Please do not call clean_var_lib() on "remove". It should only be called
on "purge".

I also believe the 

    echo "Remove the news spool in /var/spool/news yourself!"

is misplaced, but that can't be justified as critical since it doesn't
cause any data loss.  But please also consider moving this line with 
comments to the "purge" target.


Bjorn

- -- System Information:
Debian Release: lenny/sid
  APT prefers stable
  APT policy: (700, 'stable'), (650, 'testing'), (600, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.25-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkiYAqcACgkQ10rqkowbIskZHwCbByVt/cEIHrlKeDfT+aKpMb2/
jxYAnA4Rem5DjgmQMkbVcmGoxxs7hrj8
=ML2r
-----END PGP SIGNATURE-----



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to