Source: azure-cli Version: 2.50.0-2 Severity: normal The documentation in this package indicates that telemetry collection is on by default, and I don't see any patches that indicate that that has been removed.
Debian should not ship software that sends telemetry by default because it violates the privacy of users, and it is typically only in the interest of the maintainer, not the users. It's not reasonable to expect users to configure every package they might install separately not to send telemetry, since that's impractical and it's nearly impossible to configure every piece of software to do so, especially in environments like containers where users' settings are often not persisted. Please remove the telemetry functionality from the package or ensure that it is rendered completely nonfunctional, and add a note to the README.Debian indicating this change so that users can feel more confident in using the package. -- System Information: Debian Release: trixie/sid APT prefers oldstable-security APT policy: (500, 'oldstable-security'), (500, 'unstable'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.7.9-amd64 (SMP w/20 CPU threads; PREEMPT) Kernel taint flags: TAINT_USER, TAINT_WARN Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled -- brian m. carlson (they/them or he/him) Toronto, Ontario, CA
signature.asc
Description: PGP signature
