Your message dated Fri, 25 Nov 2016 16:07:44 +0000
with message-id <[email protected]>
and subject line Bug#839920: fixed in sympa 6.2.16~dfsg-2
has caused the Debian Bug report #839920,
regarding sympa: modifies conffiles (policy 10.7.3): /etc/sympa/sympa/sympa.conf
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
839920: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=839920
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sympa
Version: 6.2.16~dfsg-1
Severity: serious
User: [email protected]
Usertags: piuparts

Hi,

during a test with piuparts I noticed your package modifies conffiles.
This is forbidden by the policy, see
https://www.debian.org/doc/debian-policy/ch-files.html#s-config-files

10.7.3: "[...] The easy way to achieve this behavior is to make the
configuration file a conffile. [...] This implies that the default
version will be part of the package distribution, and must not be
modified by the maintainer scripts during installation (or at any
other time)."

Note that once a package ships a modified version of that conffile,
dpkg will prompt the user for an action how to handle the upgrade of
this modified conffile (that was not modified by the user).

Further in 10.7.3: "[...] must not ask unnecessary questions
(particularly during upgrades) [...]"

If a configuration file is customized by a maintainer script after
having asked some debconf questions, it may not be marked as a
conffile. Instead a template could be installed in /usr/share and used
by the postinst script to fill in the custom values and create (or
update) the configuration file (preserving any user modifications!).
This file must be removed during postrm purge.
ucf(1) may help with these tasks.
See also https://wiki.debian.org/DpkgConffileHandling

In https://lists.debian.org/debian-devel/2012/09/msg00412.html and
followups it has been agreed that these bugs are to be filed with
severity serious.

debsums reports modification of the following files,
from the attached log (scroll to the bottom...):

  /etc/sympa/sympa/sympa.conf


cheers,

Andreas

Attachment: sympa_6.2.16~dfsg-1.log.gz
Description: application/gzip


--- End Message ---
--- Begin Message ---
Source: sympa
Source-Version: 6.2.16~dfsg-2

We believe that the bug you reported is fixed in the latest version of
sympa, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Emmanuel Bouthenot <[email protected]> (supplier of updated sympa package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 25 Nov 2016 11:41:16 +0100
Source: sympa
Binary: sympa
Architecture: source amd64
Version: 6.2.16~dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Sympa team <[email protected]>
Changed-By: Emmanuel Bouthenot <[email protected]>
Description:
 sympa      - Modern mailing list manager
Closes: 839587 839728 839755 839920
Changes:
 sympa (6.2.16~dfsg-2) unstable; urgency=medium
 .
   [ Stefan Hornburg (Racke) ]
   * Add version to libjs-query (>= 1.11) dependency as Foundation 5
     needs this as minimum (Closes: #839755)
 .
   [ Emmanuel Bouthenot ]
   * Fix bug with Sympa config file which was shipped as a conffile
     (Closes: #839920)
   * Add a patch (Thanks to Chris Lamb) to make the build reproducible
     (Closes: #839587)
   * Fix mysql-server dependency to default-mysql-server
   * Add a NEWS file to inform about the major changes in Sympa 6.2
     (Closes: 839728)
Checksums-Sha1:
 41e7ad2578abfb73ec41481a190ed838a7f7a05f 2445 sympa_6.2.16~dfsg-2.dsc
 b2bd2c1687b3eccb4deee39eb5b811c29f20b3e8 172980 
sympa_6.2.16~dfsg-2.debian.tar.xz
 26895e118b154a17394dbc484db699ebca713485 18586 
sympa-dbgsym_6.2.16~dfsg-2_amd64.deb
 9284c58956aab83f6d2ae73c0a39ffa37a02f11a 7075 
sympa_6.2.16~dfsg-2_amd64.buildinfo
 8b9d22e0e4af5de6764d45a7ad9d1364d8178df2 3607316 sympa_6.2.16~dfsg-2_amd64.deb
Checksums-Sha256:
 73b583f2ea21e6cd7792a6f1e6eca4f0ba207426e1406162a6d620969444bb09 2445 
sympa_6.2.16~dfsg-2.dsc
 adf1c1902c5b5ff35607edc45bfbd71fcc73575f84db4c8cd971839363de0200 172980 
sympa_6.2.16~dfsg-2.debian.tar.xz
 f2f0508e07d494df645a560ddbbfb3735ec2de3610986309523f0d0fe0b28a34 18586 
sympa-dbgsym_6.2.16~dfsg-2_amd64.deb
 e8137ba8cf9d75b07dd00b9c4acf9ac688fc54d60147a5f562d00c57d1fab9b2 7075 
sympa_6.2.16~dfsg-2_amd64.buildinfo
 5bbb8590bfcde9dd93c0e4318711e0b770d3e83361144bd4cb8f215b86ae1cfe 3607316 
sympa_6.2.16~dfsg-2_amd64.deb
Files:
 99ff2ac30edff1863d0e00b853319ab0 2445 mail optional sympa_6.2.16~dfsg-2.dsc
 b9eeb4064dbedc1e97437fbc5534f2d5 172980 mail optional 
sympa_6.2.16~dfsg-2.debian.tar.xz
 2af6cc1fe54a61f1e509200908f7ab27 18586 debug extra 
sympa-dbgsym_6.2.16~dfsg-2_amd64.deb
 07da1a400d51ccea347ac7448e028de9 7075 mail optional 
sympa_6.2.16~dfsg-2_amd64.buildinfo
 460fbffd7626d13d0695f9a95347af62 3607316 mail optional 
sympa_6.2.16~dfsg-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=YfXA
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to