Package: libmsv-dev Version: 1.1-4 Severity: serious Justification: Policy ยง10.9
libmsv-dev is built with its contents owned by the user doing the build: https://buildd.debian.org/status/fetch.php?pkg=libmsv&arch=amd64&ver=1.1-4&stamp=1510377677&raw=0 > ... > drwxr-xr-x buildd/buildd 0 2017-11-11 04:20 ./ > drwxr-xr-x buildd/buildd 0 2017-11-11 04:20 ./usr/ > drwxr-xr-x buildd/buildd 0 2017-11-11 04:20 ./usr/include/ > drwxr-xr-x buildd/buildd 0 2017-11-11 04:20 ./usr/include/msv/ > ... See also https://lintian.debian.org/maintainer/cl...@debian.org.html#libmsv debian/rules has: dpkg-deb --root-owner-group --build debian/$(package) .. but I think an equivalent dpkg-deb call for debian/$(devpkg) must also need changing? I'd recommend using debhelper rather than building the package from first principles, but if you strongly prefer dpkg-deb for some reason, please check the results with lintian, debc, debdiff or similar to make sure the packaging did what you expect. Regards, smcv
