[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#905802: marked as done (changetrack: cron script accesses internal dpkg database)

Your message dated Sun, 11 Nov 2018 17:18:55 +0000
with message-id <E1gLtNv-000Arr-IO@fasolo.debian.org>
and subject line Bug#905802: fixed in changetrack 4.7-6
has caused the Debian Bug report #905802,
regarding changetrack: cron script accesses internal dpkg database
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
905802: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905802
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Source: changetrack
Source-Version: 4.7-5
Severity: important
User: debian-dpkg@lists.debian.org
Usertags: dpkg-db-access-blocker

Hi!

This package contains a cron script [M], which directly accesses
the dpkg internal database. Instead of using one of the public
interfaces provided by dpkg. The code could be replaced with something
like «dpkg-query --showformat '${Conffiles}\n' --show |
grep -E -v '(^\s*|\.schemas)$' | cut -d\  -f2 | sort | uniq».

  [M] debian/cron.daily

This a problem for multiple reasons. Even though the layout and format
of the dpkg database is administrator friendly, and it's expected that
those might need to mess with it, in case of emergency, this interface
does not extend to other programs besides the dpkg suite of tools. The
admindir can also be configured differently at dpkg build or run-time.
And finally, the contents and its format, will be changing in the near
future.

In addition the .conffiles in the database never get updated even after
conffile take overs by another package.

Thanks,
Guillem

--- End Message ---
--- Begin Message --- 
Source: changetrack
Source-Version: 4.7-6

We believe that the bug you reported is fixed in the latest version of
changetrack, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 905802@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Niels Thykier <niels@thykier.net> (supplier of updated changetrack package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 11 Nov 2018 17:08:52 +0000
Source: changetrack
Binary: changetrack
Architecture: source
Version: 4.7-6
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Niels Thykier <niels@thykier.net>
Description:
 changetrack - monitor changes to (configuration) files
Closes: 905802
Changes:
 changetrack (4.7-6) unstable; urgency=medium
 .
   * QA upload.
   * Fix access to internal dpkg database.  (Closes: #905802)
   * Set "Rules-Requires-Root" to "no" as changetrack does not need
     (fake)root to build.
   * Use the https:// variant of the link to the copyright spec in
     debian/copyright.
Checksums-Sha1:
 80053c68fbfc77348438d98ea32faef73b8b5fea 1855 changetrack_4.7-6.dsc
 e4fa08e5e0ea398dee5e6d538333c995436dc05e 12400 changetrack_4.7-6.debian.tar.xz
 1f2e0eeeb2171adcfa5f97535572b271a13c404a 5105 changetrack_4.7-6_source.buildinfo
Checksums-Sha256:
 e957bd59e7ff4ba64b07ab9baf5ed390af1c9bdc5bd620ecbd37761f9f3f3bac 1855 changetrack_4.7-6.dsc
 b1434accdbd928c6f9f108f32e572eda1b815c1ea71c2f329200f041501d35e6 12400 changetrack_4.7-6.debian.tar.xz
 47fa3e45303ea1f71cab8afd326bdd34794b73d13c5212f712dd334a6361a51d 5105 changetrack_4.7-6_source.buildinfo
Files:
 2e51e9f5d364669d431fb465d65dd9da 1855 utils optional changetrack_4.7-6.dsc
 acfaf5736e35f9b610527f0819220959 12400 utils optional changetrack_4.7-6.debian.tar.xz
 01a04022a50ae28c959b044e4fb63bb0 5105 utils optional changetrack_4.7-6_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=v+0n
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: