Your message dated Sat, 29 Sep 2012 15:48:08 +0000 with message-id <e1thzgy-00058d...@franck.debian.org> and subject line Bug#688936: fixed in tomcat7 7.0.28-3 has caused the Debian Bug report #688936, regarding tomcat7: modifies conffiles (policy 10.7.3): /etc/logrotate.d/tomcat7 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 688936: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688936 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: tomcat7 Version: 7.0.28-2. Severity: serious User: debian...@lists.debian.org Usertags: piuparts Hi, during a test with piuparts I noticed your package modifies conffiles. This is forbidden by the policy, see http://www.debian.org/doc/debian-policy/ch-files.html#s-config-files 10.7.3: "[...] The easy way to achieve this behavior is to make the configuration file a conffile. [...] This implies that the default version will be part of the package distribution, and must not be modified by the maintainer scripts during installation (or at any other time)." Note that once a package ships a modified version of that conffile, dpkg will prompt the user for an action how to handle the upgrade of this modified conffile (that was not modified by the user). Further in 10.7.3: "[...] must not ask unnecessary questions (particularly during upgrades) [...]" If a configuration file is customized by a maintainer script after having asked some debconf questions, it may not be marked as a conffile. Instead a template could be installed in /usr/share and used by the postinst script to fill in the custom values and create (or update) the configuration file (preserving any user modifications!). This file must be removed during postrm purge. ucf(1) may help with these tasks. See also http://wiki.debian.org/DpkgConffileHandling In https://lists.debian.org/debian-devel/2012/09/msg00412.html and followups it has been agreed that these bugs are to be filed with severity serious. debsums reports modification of the following files, from the attached log (scroll to the bottom...): /etc/logrotate.d/tomcat7 cheers, Andreas
tomcat7_7.0.28-2.log.gz
Description: GNU Zip compressed data
--- End Message ---
--- Begin Message ---Source: tomcat7 Source-Version: 7.0.28-3 We believe that the bug you reported is fixed in the latest version of tomcat7, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 688...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. tony mancill <tmanc...@debian.org> (supplier of updated tomcat7 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Thu, 27 Sep 2012 10:55:35 -0700 Source: tomcat7 Binary: tomcat7-common tomcat7 tomcat7-user libtomcat7-java libservlet3.0-java libservlet3.0-java-doc tomcat7-admin tomcat7-examples tomcat7-docs Architecture: source all Version: 7.0.28-3 Distribution: unstable Urgency: low Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: tony mancill <tmanc...@debian.org> Description: libservlet3.0-java - Servlet 3.0 and JSP 2.2 Java API classes libservlet3.0-java-doc - Servlet 3.0 and JSP 2.2 Java API documentation libtomcat7-java - Servlet and JSP engine -- core libraries tomcat7 - Servlet and JSP engine tomcat7-admin - Servlet and JSP engine -- admin web applications tomcat7-common - Servlet and JSP engine -- common files tomcat7-docs - Servlet and JSP engine -- documentation tomcat7-examples - Servlet and JSP engine -- example web applications tomcat7-user - Servlet and JSP engine -- tools to create user instances Closes: 688936 Changes: tomcat7 (7.0.28-3) unstable; urgency=low . [ Miguel Landaeta ] * Fix small typo in README.Debian. . [ tony mancill ] * Use ucf and a template for /etc/logrotate.d/tomcat6 file to avoid updating the shipped conffile. (Closes: #688936) Checksums-Sha1: aef4199e2d670c512df9248513f674d056551f9a 2614 tomcat7_7.0.28-3.dsc 28fd2dc43b10d12484ae3a6451ea6ac57eda798f 44552 tomcat7_7.0.28-3.debian.tar.gz 136bacc710a65662d2649f7a32676fc30846868f 59318 tomcat7-common_7.0.28-3_all.deb a8ea3e5f8c4af612d9e6a168a83c111704817af8 49126 tomcat7_7.0.28-3_all.deb 48b44bc60741734a778f217f3af6b32d95237ee8 37292 tomcat7-user_7.0.28-3_all.deb cf39299cc506ac481cf86458ea7bd6a0957d543b 3501212 libtomcat7-java_7.0.28-3_all.deb e5c825663ec709d50d50f914b56c9fe45ef1c9ed 303534 libservlet3.0-java_7.0.28-3_all.deb d6baabbd06fea1fee37c45ff598f005ee47bb6f9 301138 libservlet3.0-java-doc_7.0.28-3_all.deb 2bf56e60c43485ea4a5297390d2666d4e7864a63 49912 tomcat7-admin_7.0.28-3_all.deb 6181a8253012c823d9c25ad3574899b14ab34064 202842 tomcat7-examples_7.0.28-3_all.deb 9b5be7b2514995579a3535ec0d2a598f89f4c159 645568 tomcat7-docs_7.0.28-3_all.deb Checksums-Sha256: c0691d22a7a5d2acb376d51ae953b83667b075758adf50d059dbd5b71430cbe3 2614 tomcat7_7.0.28-3.dsc c8250f00d274070b22d1d51fa6f08e1677dd41aa58233fb0f1863df7ba79272a 44552 tomcat7_7.0.28-3.debian.tar.gz da898cbe0a1a744d291e1cc145a63c81cdbdd94a5d0eef37f3b50a07a40e8a69 59318 tomcat7-common_7.0.28-3_all.deb cb0a6ec2621ddf3db03f0b512e90c70790b55ff543fa1bfc8829b762ada1c994 49126 tomcat7_7.0.28-3_all.deb efe25fdc9cb7da9af235208549395c82c1488bcd60ac379a3a2dc0d057f45d6f 37292 tomcat7-user_7.0.28-3_all.deb 42b775c9a66c740dbd9e6d25391072310e2d6346e29d646a8140e614658aa303 3501212 libtomcat7-java_7.0.28-3_all.deb 4d1d93bf147ce7b5cc71ba552ea942705deb5388e745f73222947b1757c5a511 303534 libservlet3.0-java_7.0.28-3_all.deb 502beb2b93a0862f063184c1323ccee59d96182d6a7b8109a19e8177146fcebc 301138 libservlet3.0-java-doc_7.0.28-3_all.deb fcf9f761bbfe1799545c5af7129b702c702ffeda065258c0faac3b6b7b9eb0cc 49912 tomcat7-admin_7.0.28-3_all.deb d3006f9fb1022ff457c85e2a23a4c7ba0dfb816fd9b1ca9e3472075fb15ac975 202842 tomcat7-examples_7.0.28-3_all.deb 091522cb14bfb53634cfd6fb7ff41232a0cfa697eb22ea7c7130e1abd51fcc65 645568 tomcat7-docs_7.0.28-3_all.deb Files: f759ffc77dcfcfc6b6a1a069fc609edc 2614 java optional tomcat7_7.0.28-3.dsc 721eb508d575f5fd2866a999f524f27f 44552 java optional tomcat7_7.0.28-3.debian.tar.gz a4d2b7273c507e00d7c729c2fa74d944 59318 java optional tomcat7-common_7.0.28-3_all.deb 2bec1689993274d7e6ea6ac09c888eec 49126 java optional tomcat7_7.0.28-3_all.deb 7645426dbd11e48a2c6cba6407109677 37292 java optional tomcat7-user_7.0.28-3_all.deb a1c7e878a270c74559c23fd49efd0119 3501212 java optional libtomcat7-java_7.0.28-3_all.deb 7e27d6792c4a1bb256d167735f6ff87e 303534 java optional libservlet3.0-java_7.0.28-3_all.deb 476d54220326374efd99a3bba5b362c8 301138 doc optional libservlet3.0-java-doc_7.0.28-3_all.deb 92394d9db6a4a1aed0b95775d1245d78 49912 java optional tomcat7-admin_7.0.28-3_all.deb 9cd51bd3cf99410e60b9012afdd084de 202842 java optional tomcat7-examples_7.0.28-3_all.deb d2477a7e16046d994a3f9cbabb346475 645568 doc optional tomcat7-docs_7.0.28-3_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJQZxCAAAoJECHSBYmXSz6W/KUQAIVQHxQjMevPfP9itr7eUn1W wEGFKdLsm3GIGsYA5d8ac5DHd1EMit4dTzWSLb1HY8q0PyR80CD1eQeKJz8y3H/S naeVJC1EW31LJuo8zSt+rDmdxutGNhudYHlUjK+BOE9BdzJHLw1WQigZNysyydpM A6guAOS7AV9P2/K1B7mHwGzVJu5YJp377MMy/DjimWM/0L9K2H8TNcucAFxBqAzr mi1/NEmxj1idtKOuU899TP7FAfz6TT9xXVal1w7I0TpgRQBU969/h7eJamnB7Xyj FiRErHrtxGcn1l4g8tpYORJseJi0oNAktg+jom1jQhcrESuSTIfAL0PgMKyqEsLK g2NwUYtgkriUfApWII0tsmWQ88KmzkqWyWxwTXHzOovo0TXXHZvFyOWx89Eg3Lyw KOeDoc6TS9ofueW5m+AzgTgKegIZEGhTfogXSZyzAdTrwVvDN85z7qgUgddx837u 4f54cH+aRifo9cNjWo3NI89rfpNycnyyuvvCrcHjEcEtndmGhB5WbpCClfDQTH5B gKm5oNWz5dR4WhunndQSkKnT6/N/UFc3MVX0bBZfElk5iq7hEa6rtOFbEcVGfpbI pyCxj2V6lGSHCF1dzuxju97oTK2ifL9NsSdXvvgIEszU4ill5v/lAudJ9NuaMiQ3 zClZvWaftyQGYO6VEi86 =iRMj -----END PGP SIGNATURE-----
--- End Message ---
__ This is the maintainer address of Debian's Java team <http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. Please use debian-j...@lists.debian.org for discussions and questions.
