I'd have no problem with the snippet being added, but disabled by
default and a warning to the admin that he/she needs to enable it to get
the full benefit or something.  But this "tada, surprise" is an obvious
no-no.

** Description changed:

  I was shocked to find out that a package in Ubuntu installs a
  sources.list snippet to point to a third-party repo.  So far, I've
  always had to specifically enable any such third-party repo (Skype,
  etc.), so I was well aware of what was going on.  That there is a
  package in universe allowed to sneak stuff in behind my back like that
  without at the very least a BIG FAT WARNING is untenable.
  
  I have read https://lists.ubuntu.com/archives/technical-
  board/2014-April/001858.html and following BTW.  I understood that to
  be about discussing the requirements to set up a separate, Ubuntu-
  sanctioned distribution channel supposedly for IP-related reasons.  I'm
  fine with that.  I'm absolutely not fine with a third-party repo being
  enabled automatically behind my back.
+ 
+ $ cat /etc/apt/sources.list.d/ubuntukylin.list
+ deb http://archive.ubuntukylin.com:10006/ubuntukylin focal main
+ 
+ $ sudo dpkg -S /etc/apt/sources.list.d/ubuntukylin.list
+ ubuntukylin-default-settings: /etc/apt/sources.list.d/ubuntukylin.list
+ 
+ $ apt policy ubuntukylin-default-settings
+ ubuntukylin-default-settings:
+   Installed: 20.04.2
+   Candidate: 20.04.2
+   Version table:
+  *** 20.04.2 500
+         500 http://de.archive.ubuntu.com/ubuntu focal/universe amd64 Packages
+         500 http://de.archive.ubuntu.com/ubuntu focal/universe i386 Packages
+         100 /var/lib/dpkg/status

** Description changed:

  I was shocked to find out that a package in Ubuntu installs a
  sources.list snippet to point to a third-party repo.  So far, I've
  always had to specifically enable any such third-party repo (Skype,
  etc.), so I was well aware of what was going on.  That there is a
  package in universe allowed to sneak stuff in behind my back like that
  without at the very least a BIG FAT WARNING is untenable.
  
  I have read https://lists.ubuntu.com/archives/technical-
  board/2014-April/001858.html and following BTW.  I understood that to
  be about discussing the requirements to set up a separate, Ubuntu-
  sanctioned distribution channel supposedly for IP-related reasons.  I'm
  fine with that.  I'm absolutely not fine with a third-party repo being
  enabled automatically behind my back.
  
  $ cat /etc/apt/sources.list.d/ubuntukylin.list
  deb http://archive.ubuntukylin.com:10006/ubuntukylin focal main
  
  $ sudo dpkg -S /etc/apt/sources.list.d/ubuntukylin.list
  ubuntukylin-default-settings: /etc/apt/sources.list.d/ubuntukylin.list
  
  $ apt policy ubuntukylin-default-settings
  ubuntukylin-default-settings:
-   Installed: 20.04.2
-   Candidate: 20.04.2
-   Version table:
-  *** 20.04.2 500
-         500 http://de.archive.ubuntu.com/ubuntu focal/universe amd64 Packages
-         500 http://de.archive.ubuntu.com/ubuntu focal/universe i386 Packages
-         100 /var/lib/dpkg/status
+   Installed: 20.04.2
+   Candidate: 20.04.2
+   Version table:
+  *** 20.04.2 500
+         500 http://archive.ubuntu.com/ubuntu focal/universe amd64 Packages
+         100 /var/lib/dpkg/status

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1914266

Title:
  ubuntukylin-default-settings injects third-party repo

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntukylin-default-settings/+bug/1914266/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to