[SCM] Debian package checker branch, master, updated. 2.2.17-35-g1d1b09c
The following commit has been merged in the master branch:
commit 1d1b09c9595f5dac61285e1b5f6f6d8d14b155bb
Author: Russ Allbery <rra@debian.org>
Date: Thu Nov 12 17:41:27 2009 -0800
Update severities to match ftpmaster reject criteria
* checks/binaries.desc:
+ [RA] library-in-debug-or-profile-should-not-be-stripped,
binary-or-shlib-defines-rpath, arch-dependent-file-in-usr-share, and
binary-in-etc, binary-file-compressed-with-upx,
binary-with-bad-dynamic-table, and embedded-zlib are now
serious since they can result in ftpmaster rejects. embedded-zlib,
missing-dependency-on-libc, and binary-or-shlib-defines-rpath are
possible rather than certain since overrides are allowed.
* checks/conffiles.desc:
+ [RA] file-in-usr-marked-as-conffile is serious (ftpmaster reject).
Add a Policy reference and improve the description.
+ [RA] non-etc-file-marked-as-conffile is serious/possible rather than
important/certain (ftpmaster reject unless overridden).
* checks/control-file.desc:
+ [RA] build-info-in-binary-control-file-section and
debian-control-with-duplicate-fields are now serious (ftpmaster
reject).
* checks/control-files.desc:
+ [RA] not-allowed-control-file, control-file-has-bad-permissions, and
control-file-has-bad-owner are now serious (ftpmaster reject).
Mention that the config control file should also be executable.
* checks/copyright-file.desc:
+ [RA] copyright-refers-to-old-directory, old-style-copyright-file,
usr-share-doc-symlink-without-dependency,
usr-share-doc-symlink-to-foreign-package,
copyright-refers-to-incorrect-directory, and
copyright-contains-dh_make-todo-boilerplate are now serious
(ftpmaster reject). copyright-contains-dh_make-todo-boilerplate is
possible (overrides allowed). Significantly improve the description
of usr-share-doc-symlink-without-dependency to mention that Lintian
doesn't look at transitive dependencies, and change to possible.
* checks/etcfiles.desc:
+ [RA] file-in-etc-not-marked-as-conffile is serious (ftpmaster
reject).
* checks/fields.desc:
+ [RA] Multiple maintainer-* and uploader-* tags for syntax errors or
localhost addresses are now serious (ftpmaster reject), as are
section-is-dh_make-template and bad-relation.
* checks/files.desc:
+ [RA] package-contains-ancient-file, package-installs-python-pyc
symlink-has-too-many-up-segments, and package-contains-info-dir-file
are now serious (ftpmaster reject).
+ [RA] dir-or-file-in-var-www is now serious/possible (ftpmaster
reject unless overridden).
+ [RA] dir-or-file-in-{tmp,mnt,opt,srv} are now serious and have the
proper File Hierarchy Standard cross-references and descriptions.
* checks/rules.desc:
+ [RA] missing-build-dependency is now serious/possible (ftpmaster
reject unless overridden).
diff --git a/checks/binaries.desc b/checks/binaries.desc
index 07d0a49..07cd24e 100644
--- a/checks/binaries.desc
+++ b/checks/binaries.desc
@@ -26,19 +26,20 @@ Info: The package installs an unstripped binary or object file.
<tt>--strip-unneeded</tt> option.
Tag: library-in-debug-or-profile-should-not-be-stripped
-Severity: important
+Severity: serious
Certainty: certain
Info: Libraries in <tt>.../lib/debug</tt> or in
- <tt>.../lib/profile</tt> usually should not be stripped.
+ <tt>.../lib/profile</tt> must not be stripped; this defeats the whole
+ point of the separate library.
Tag: statically-linked-binary
Severity: important
Certainty: possible
Info: The package installs a statically linked binary or object file.
.
- Usually this is a bug. Otherwise, please install an override if your package
- is an exception. Note that binaries named *-static and *.static are already
- excluded, just as any binaries in packages named *-static.
+ Usually this is a bug. Otherwise, please add an override if your package
+ is an exception. Binaries named *-static and *.static are automatically
+ excluded, as are any binaries in packages named *-static.
Tag: library-not-linked-against-libc
Severity: minor
@@ -53,8 +54,8 @@ Info: The package installs a binary which is not dynamically linked
against libc.
Tag: binary-or-shlib-defines-rpath
-Severity: normal
-Certainty: certain
+Severity: serious
+Certainty: possible
Ref: http://wiki.debian.org/RpathIssue
Info: The binary or shared library sets RPATH. This overrides the normal
library search path, possibly interfering with local policy and causing
@@ -107,18 +108,18 @@ Info: The listed shared library doesn't include information about which
If you have questions about this, please contact &debdev;.
Tag: arch-dependent-file-in-usr-share
-Severity: important
+Severity: serious
Certainty: certain
Ref: fhs usrsharearchitectureindependentdata
Info: This package installs an ELF binary in the <tt>/usr/share</tt>
hierarchy, which is reserved for architecture-independent files.
Tag: binary-in-etc
-Severity: important
+Severity: serious
Certainty: certain
Ref: fhs etchostspecificsystemconfiguration
-Info: This package installs an ELF binary in <tt>/etc</tt>.
- The Filesystem Hierarchy Standard forbids this.
+Info: This package installs an ELF binary in <tt>/etc</tt>. The
+ Filesystem Hierarchy Standard forbids this.
Tag: binary-compiled-with-profiling-enabled
Severity: normal
@@ -127,7 +128,7 @@ Info: While profiling is useful for testing and debugging purposes, enabling
it causes a program to leave gmon.out files whenever a user runs it.
Tag: binary-file-compressed-with-upx
-Severity: important
+Severity: serious
Certainty: certain
Info: Debian does not allow binaries to be compressed by UPX.
@@ -142,7 +143,7 @@ Info: The package name of a library package should usually reflect
Ref: libpkg-guide 5
Tag: binary-with-bad-dynamic-table
-Severity: important
+Severity: serious
Certainty: possible
Info: This appears to be an ELF file but objdump -T cannot parse it.
If it is external debugging symbols for another file, it should be
@@ -166,7 +167,7 @@ Info: This appears to be an ELF file, but objdump believes it is
Tag: missing-dependency-on-libc
Severity: serious
-Certainty: certain
+Certainty: possible
Ref: policy 8.6
Info: The listed file appears to be linked against the C library, but the
package doesn't depend on the C library package. Normally this indicates
@@ -240,12 +241,16 @@ Info: Lintian found a spelling error in the given binary. Lintian has a
grep -r '\b<original-word>\b' <source-tree>
Tag: embedded-zlib
-Severity: important
-Certainty: certain
+Severity: serious
+Certainty: possible
+Ref: policy 4.13
Info: The given ELF object appears to have been statically linked to zlib.
- Doing this is discouraged due to the extra work needed by the security team
- to fix all the extra embedded copies or trigger the package rebuilds, as
- appropriate.
+ Doing this is strongly discouraged due to the extra work needed by the
+ security team to fix all the extra embedded copies or trigger the package
+ rebuilds, as appropriate.
+ .
+ Some packages have to use a modified version of zlib due to requirements
+ in that package. If this is the case, please add an override.
Tag: debug-symbols-directly-in-usr-lib-debug
Severity: important
diff --git a/checks/conffiles.desc b/checks/conffiles.desc
index 3792bef..183b52a 100644
--- a/checks/conffiles.desc
+++ b/checks/conffiles.desc
@@ -7,19 +7,20 @@ Info: This script checks if the conffiles control file of a binary
package is correct.
Tag: file-in-usr-marked-as-conffile
-Severity: important
+Severity: serious
Certainty: certain
-Info: Files below <tt>/usr</tt> may not be marked as conffiles, since
- <tt>/usr</tt> might be mounted read-only and thus, the local system
- administrator would not have a chance to modify this configuration
- file.
+Ref: policy 10.7.2
+Info: All configuration files must reside in <tt>/etc</tt>. Files below
+ <tt>/usr</tt> may not be marked as conffiles since <tt>/usr</tt> might be
+ mounted read-only. The local system administrator would therefore not
+ have a chance to modify this configuration file.
Tag: non-etc-file-marked-as-conffile
-Severity: important
-Certainty: certain
+Severity: serious
+Certainty: possible
Info: A file installed in some other directory than <tt>/etc</tt>
- is marked as conffile. A conffile typically implies a configuration file, and
- policy mandates such files to be in /etc
+ is marked as conffile. A conffile typically implies a configuration
+ file, and Policy mandates such files to be in <tt>/etc</tt>.
Ref: policy 10.7.2
Tag: relative-conffile
diff --git a/checks/control-file.desc b/checks/control-file.desc
index 5da3343..4401ea9 100644
--- a/checks/control-file.desc
+++ b/checks/control-file.desc
@@ -20,7 +20,7 @@ Info: The Debian control file should be valid UTF-8, an encoding of
$ mv control.new control
Tag: build-info-in-binary-control-file-section
-Severity: important
+Severity: serious
Certainty: certain
Ref: policy 5.2
Info: The control file has a Build-Depends, Build-Depends-Indep,
@@ -29,11 +29,11 @@ Info: The control file has a Build-Depends, Build-Depends-Indep,
the source section of the control file.
Tag: debian-control-with-duplicate-fields
-Severity: important
+Severity: serious
Certainty: certain
Info: One of the paragraphs of your debian/control contains the same
- field more than once. This can lead to an unexpected behaviour of dpkg
- and apt.
+ field more than once. This can lead to unexpected behaviour in
+ <tt>dpkg</tt> and <tt>apt</tt>.
Tag: debian-control-has-unusual-field-spacing
Severity: pedantic
diff --git a/checks/control-files.desc b/checks/control-files.desc
index c09d9c9..b5698c4 100644
--- a/checks/control-files.desc
+++ b/checks/control-files.desc
@@ -13,7 +13,7 @@ Info: The package contains an unknown control file. Policy says that
good idea.
Tag: not-allowed-control-file
-Severity: important
+Severity: serious
Certainty: certain
Info: The package contains a control file that is not allowed in this
type of package. Some control files are only allowed in either .deb
@@ -27,12 +27,13 @@ Info: The package contains an empty control file, which is most probably
an error.
Tag: control-file-has-bad-permissions
-Severity: important
+Severity: serious
Certainty: certain
-Info: The postinst, postrm, preinst, and prerm control files should use
- mode 0755; all other control files should use 0644.
+Info: The <tt>config</tt>, <tt>postinst</tt>, <tt>postrm</tt>,
+ <tt>preinst</tt>, and <tt>prerm</tt> control files should use mode 0755;
+ all other control files should use 0644.
Tag: control-file-has-bad-owner
-Severity: important
+Severity: serious
Certainty: certain
Info: All control files should be owned by root/root.
diff --git a/checks/copyright-file.desc b/checks/copyright-file.desc
index b984481..1674f24 100644
--- a/checks/copyright-file.desc
+++ b/checks/copyright-file.desc
@@ -22,7 +22,7 @@ Ref: policy 12.5
Tested: empty
Tag: copyright-refers-to-old-directory
-Severity: important
+Severity: serious
Certainty: certain
Info: The common licenses (GPL, BSD, Artistic, etc) have been moved from
/usr/doc/copyright to /usr/share/common-licenses.
@@ -68,26 +68,39 @@ Info: The copyright file /usr/share/doc/<i>pkg</i>/copyright contains the
Ref: policy 12.5
Tag: usr-share-doc-symlink-without-dependency
-Severity: important
-Certainty: certain
-Info: If the package installs a symbolic link /usr/share/doc/<i>pkg1</i> ->
- <i>pkg2</i>, then <i>pkg1</i> has to depend on <i>pkg2</i> with the same
- version as <i>pkg1</i>.
+Severity: serious
+Certainty: possible
+Info: If the package installs a symbolic link
+ <tt>/usr/share/doc/<i>pkg1</i> -> <i>pkg2</i></tt>, then <i>pkg1</i>
+ must depend on <i>pkg2</i> directory, with the same version as
+ <i>pkg1</i>.
+ .
+ Adding the dependency just to fix this bug is often not a good solution.
+ Usually, it's better to include a real <tt>/usr/share/doc/<i>pkg1</i></tt>
+ directory within <i>pkg1</i> and copy the copyright file into that
+ directory.
.
- Note, that adding the "Depends:" entry just to fix this bug is not a good
- solution. It's suggested that you include a real /usr/share/doc/<i>pkg1</i>
- directory within <i>pkg1</i> and copy the copyright file into that directory.
+ Transitive dependencies are not allowed here. In other words, if the
+ documentation directory is shipped in <i>pkg3</i> and <i>pkg1</i> depends
+ on <i>pkg2</i>, which in turn depends on <i>pkg3</i>, that's still an
+ error. Copyright file extractors are not required to go more than one
+ level deep when resolving dependencies. Each package should have a
+ direct dependency on the package which includes its documentation
+ directory.
Ref: policy 12.5
Tag: usr-share-doc-symlink-to-foreign-package
-Severity: important
+Severity: serious
Certainty: certain
-Info: If the package installs a symbolic link /usr/share/doc/<i>pkg1</i> ->
- <i>pkg2</i>, then <i>pkg1</i> and <i>pkg2</i> must both come from the same
- source package.
+Info: If the package installs a symbolic link
+ <tt>/usr/share/doc/<i>pkg1</i> -> <i>pkg2</i></tt>, then <i>pkg1</i>
+ and <i>pkg2</i> must both come from the same source package.
.
- It's suggested that you include a real /usr/share/doc/<i>pkg1</i> directory
- within <i>pkg1</i> and copy the copyright file to that directory.
+ The best solution is probably to stop symlinking the
+ <tt>/usr/share/doc</tt> directory for this package and instead include a
+ real /usr/share/doc/<i>pkg1</i> directory within <i>pkg1</i> with the
+ appropriate contents (such as the <tt>copyright</tt> and
+ <tt>changelog.Debian.gz</tt> files).
Ref: policy 12.5
Tag: cannot-check-whether-usr-share-doc-symlink-points-to-foreign-package
@@ -101,7 +114,7 @@ Info: There is a symlink /usr/share/doc/<i>pkg1</i> -> <i>pkg2</i>
package.
Tag: old-style-copyright-file
-Severity: important
+Severity: serious
Certainty: certain
Info: The package installs a /usr/doc/copyright/<i>pkg</i> file. Instead,
you should place the copyright file in /usr/share/doc/<i>pkg</i>/copyright.
@@ -149,7 +162,7 @@ Info: If your package uses any one of the licenses in
Ref: policy 12.5
Tag: copyright-refers-to-incorrect-directory
-Severity: important
+Severity: serious
Certainty: certain
Ref: policy 12.5
Info: In the directory name /usr/share/common-licenses, licenses is spelled
@@ -229,8 +242,8 @@ Info: The Debian copyright file should be valid UTF-8, an encoding of
$ mv copyright.new copyright
Tag: copyright-contains-dh_make-todo-boilerplate
-Severity: normal
-Certainty: certain
+Severity: serious
+Certainty: possible
Ref: policy 12.5
Info: The string "Please also look if..." appears in the copyright
file, which indicates that you either didn't check the whole source
diff --git a/checks/description.desc b/checks/description.desc
index 319b684..f9647fe 100644
--- a/checks/description.desc
+++ b/checks/description.desc
@@ -18,7 +18,6 @@ Info: The first line in the "Description:" is empty.
Tag: extended-description-is-empty
Severity: serious
Certainty: certain
-Status: untested
Info: The extended description (the lines after the first line of the
"Description:" field) is empty.
@@ -83,7 +82,7 @@ Info: The synopsis or the extended description just says "Missing",
which is a template provided by debmake.
Tag: description-is-dh_make-template
-Severity: important
+Severity: serious
Certainty: certain
Info: The synopsis or the extended description has not been changed
from the template provided by dh_make.
diff --git a/checks/etcfiles.desc b/checks/etcfiles.desc
index b9eaaab..5f3c9d5 100644
--- a/checks/etcfiles.desc
+++ b/checks/etcfiles.desc
@@ -5,7 +5,7 @@ Type: binary
Unpack-Level: 1
Tag: file-in-etc-not-marked-as-conffile
-Severity: important
+Severity: serious
Certainty: certain
Ref: policy 10.7
Info: Files in <tt>/etc</tt> must be marked conffiles if they are included
diff --git a/checks/fields.desc b/checks/fields.desc
index 8ab6024..0224078 100644
--- a/checks/fields.desc
+++ b/checks/fields.desc
@@ -133,13 +133,13 @@ Ref: policy 5.6.2
Tag: maintainer-address-missing
Severity: serious
Certainty: certain
-Info: The maintainer field should contain the package maintainer's name and
+Info: The maintainer field must contain the package maintainer's name and
email address, with the name followed by the address inside angle
brackets (< and >). The address seems to be missing.
Ref: policy 5.6.2
Tag: maintainer-address-malformed
-Severity: important
+Severity: serious
Certainty: certain
Info: The maintainer field could not be parsed according to the rules in
the Policy Manual.
@@ -158,14 +158,14 @@ Info: The maintainer address does not have whitespace between the name
and the email address.
Tag: maintainer-address-is-on-localhost
-Severity: important
+Severity: serious
Certainty: certain
Info: The maintainer address includes localhost(.localdomain), which is
an invalid e-mail address.
Ref: policy 5.6.2
Tag: uploader-name-missing
-Severity: important
+Severity: serious
Certainty: certain
Info: The uploader field seems to contain just an email address. It must
contain the package uploader's name and email address.
@@ -180,7 +180,7 @@ Info: The uploader field should contain the package uploader's name and
Ref: policy 5.6.2
Tag: uploader-address-malformed
-Severity: important
+Severity: serious
Certainty: certain
Info: The uploader field could not be parsed according to the rules in
the Policy Manual.
@@ -199,7 +199,7 @@ Info: The uploader address does not have whitespace between the name
and the email address.
Tag: uploader-address-is-on-localhost
-Severity: important
+Severity: serious
Certainty: certain
Info: The uploader address includes localhost(.localdomain), which is
an invalid e-mail address.
@@ -304,7 +304,7 @@ Info: The "Section:" field in this package's control file is not one of
Ref: policy 2.4
Tag: section-is-dh_make-template
-Severity: important
+Severity: serious
Certainty: certain
Info: The "Section:" field in this package's control file is set to
unknown. This is not a valid section, and usually means a dh_make
@@ -440,7 +440,7 @@ Info: The package declares a relationship with itself. This is not very
package name doubles as a virtual package.
Tag: bad-relation
-Severity: important
+Severity: serious
Certainty: certain
Info: The package declares a relationship that could not be parsed according
to the rules given in the Policy Manual.
diff --git a/checks/files.desc b/checks/files.desc
index 6de36d5..df706c6 100644
--- a/checks/files.desc
+++ b/checks/files.desc
@@ -8,7 +8,7 @@ Info: This script checks if a binary package conforms to policy
WRT to files and directories.
Tag: package-contains-ancient-file
-Severity: important
+Severity: serious
Certainty: certain
Info: Your package contains a file that claims to have been generated
more than 20 years ago. This is most probably an error. Your package
@@ -332,8 +332,9 @@ Info: Scripts are usually not documentation files, unless they are
<tt>/usr/share/doc/<i>pkg</i>/examples</tt> directory.
Tag: symlink-has-too-many-up-segments
-Severity: important
+Severity: serious
Certainty: certain
+Ref: policy 10.5
Info: The symlink references a directory beyond the root directory "/".
Tag: lengthy-symlink
@@ -419,8 +420,8 @@ Info: <tt>/var/run</tt> may be a temporary filesystem, so any directories
Ref: policy 9.3.2
Tag: dir-or-file-in-var-www
-Severity: important
-Certainty: certain
+Severity: serious
+Certainty: possible
Ref: fhs thevarhierarchy
Info: Debian packages should not install files under <tt>/var/www</tt>.
This is not one of the <tt>/var</tt> directories in the File Hierarchy
@@ -437,28 +438,36 @@ Info: Debian packages should not install files under <tt>/var/www</tt>.
As an exception, packages are permitted to create the <tt>/var/www</tt>
directory due to its past history as the default document root, but
should at most copy over a default file in postinst for a new install.
+ In this case, please add a Lintian override.
Tag: dir-or-file-in-tmp
-Severity: important
+Severity: serious
Certainty: certain
-Info: Packages should not install into <tt>/tmp</tt> or <tt>/var/tmp</tt>.
+Info: Packages must not install files into <tt>/tmp</tt> or
+ <tt>/var/tmp</tt>. The File Hierarchy Standard specifies that such files
+ may be removed by the administrator and that programs may not depend on
+ any files in <tt>/tmp</tt> being preserved across invocations, which
+ combined mean that it makes no sense to ship files in these directories.
+Ref: fhs tmptemporaryfiles, fhs vartmptemporaryfilespreservedbetwee
Tag: dir-or-file-in-mnt
-Severity: important
+Severity: serious
Certainty: certain
Info: Packages should not install into <tt>/mnt</tt>. The FHS states that
- the contents of this directory is a local issue.
+ this directory is reserved for the local system administrator for
+ temporary mounts and that it must not be used by installation programs.
+Ref: fhs mntmountpointforatemporarilymount
Tag: dir-or-file-in-opt
-Severity: important
+Severity: serious
Certainty: certain
Info: Debian packages should not install into <tt>/opt</tt>, because it
is reserved for add-on software.
+Ref: fhs optaddonapplicationsoftwarepackages
Tag: dir-or-file-in-srv
-Severity: important
+Severity: serious
Certainty: certain
-Ref: fhs therootfilesystem
Info: Debian packages should not install into <tt>/srv</tt>. The
specification of <tt>/srv</tt> states that its structure is at the
discretion of the local administrator and no package should rely on any
@@ -470,6 +479,7 @@ Info: Debian packages should not install into <tt>/srv</tt>. The
a way that allows the local administrator to specify and preserve their
chosen directory structure (such as through post-install configuration,
setup scripts, debconf prompting, etc.).
+Ref: fhs srvdataforservicesprovidedbysystem
Tag: third-party-package-in-python-dir
Severity: normal
@@ -733,9 +743,9 @@ Info: The directory /usr/lib/site-python has been deprecated as a
default search path.
Tag: package-installs-python-pyc
-Severity: normal
+Severity: serious
Certainty: certain
-Info: Compiled python source files should not be included in the package.
+Info: Compiled python source files must not be included in the package.
These files should be removed from the package and created at package
installation time in the postinst.
@@ -1026,7 +1036,7 @@ Info: This package contains both bitmapped fonts for a specific DPI
provided in a separate package with <tt>-misc</tt> appended to its name.
Tag: package-contains-info-dir-file
-Severity: important
+Severity: serious
Certainty: certain
Info: This package contains a file named <tt>dir</tt> or <tt>dir.old</tt>,
possibly compressed, in <tt>/usr/share/info</tt>. This is the directory
diff --git a/checks/rules.desc b/checks/rules.desc
index 59ebd93..6aca658 100644
--- a/checks/rules.desc
+++ b/checks/rules.desc
@@ -103,8 +103,8 @@ Info: One of the targets in the <tt>debian/rules</tt> file for this
incorrect or missing package files and metadata.
Tag: missing-build-dependency
-Severity: important
-Certainty: certain
+Severity: serious
+Certainty: possible
Ref: policy 4.2
Info: The package doesn't specify a build dependency on a package that is
used in <tt>debian/rules</tt>.
diff --git a/debian/changelog b/debian/changelog
index 734f2c5..5f5f2ce 100755
--- a/debian/changelog
+++ b/debian/changelog
@@ -10,9 +10,21 @@ lintian (2.2.18) UNRELEASED; urgency=low
* checks/binaries.desc:
+ [RA] Remove experimental marker on spelling-error-in-binary. Change
severity to minor; spelling errors are minor bugs.
+ + [RA] library-in-debug-or-profile-should-not-be-stripped,
+ binary-or-shlib-defines-rpath, arch-dependent-file-in-usr-share, and
+ binary-in-etc, binary-file-compressed-with-upx,
+ binary-with-bad-dynamic-table, and embedded-zlib are now
+ serious since they can result in ftpmaster rejects. embedded-zlib,
+ missing-dependency-on-libc, and binary-or-shlib-defines-rpath are
+ possible rather than certain since overrides are allowed.
* checks/changelog-file:
+ [FL] Avoid various Perl warnings which can be caused by
completly broken changelog files.
+ * checks/conffiles.desc:
+ + [RA] file-in-usr-marked-as-conffile is serious (ftpmaster reject).
+ Add a Policy reference and improve the description.
+ + [RA] non-etc-file-marked-as-conffile is serious/possible rather than
+ important/certain (ftpmaster reject unless overridden).
* checks/control-file{,.desc}:
+ [RA] Say to use (= ${binary:Version}) to fix weak dependencies
between a library dev package and the shared library. Thanks,
@@ -20,6 +32,13 @@ lintian (2.2.18) UNRELEASED; urgency=low
+ [ADB] Fix an uninitialised value warning when processing a
-dev package which has no Depends: fields. Thanks, Lucas
Nussbaum.
+ + [RA] build-info-in-binary-control-file-section and
+ debian-control-with-duplicate-fields are now serious (ftpmaster
+ reject).
+ * checks/control-files.desc:
+ + [RA] not-allowed-control-file, control-file-has-bad-permissions, and
+ control-file-has-bad-owner are now serious (ftpmaster reject).
+ Mention that the config control file should also be executable.
* checks/copyright-file{,.desc}:
+ [FL] Add special exception to no-copyright-file for perl.
See #522827 for discussion. (Closes: #553262)
@@ -38,6 +57,15 @@ lintian (2.2.18) UNRELEASED; urgency=low
automatically extracted from the perl module" by dh-make-perl, and
ensure that this is copyright-contains-dh-make-perl-boilerplate and
not helper-templates-in-copyright, since it is lower severity.
+ + [RA] copyright-refers-to-old-directory, old-style-copyright-file,
+ usr-share-doc-symlink-without-dependency,
+ usr-share-doc-symlink-to-foreign-package,
+ copyright-refers-to-incorrect-directory, and
+ copyright-contains-dh_make-todo-boilerplate are now serious
+ (ftpmaster reject). copyright-contains-dh_make-todo-boilerplate is
+ possible (overrides allowed). Significantly improve the description
+ of usr-share-doc-symlink-without-dependency to mention that Lintian
+ doesn't look at transitive dependencies, and change to possible.
* checks/cruft:
+ [FL] Add automake1.11 to list of autotools packages. Thanks,
Laurent Bigonville. (Closes: #551051)
@@ -48,17 +76,31 @@ lintian (2.2.18) UNRELEASED; urgency=low
* checks/description.desc:
+ [RA] Downgrade description-synopsis-might-not-be-phrased-properly to
minor and fix the cross-reference to point to devref, not Policy.
- * checks/fields:
+ + [RA] description-is-dh_make-template is serious (ftpmaster reject).
+ * checks/etcfiles.desc:
+ + [RA] file-in-etc-not-marked-as-conffile is serious (ftpmaster
+ reject).
+ * checks/fields{,.desc}:
+ [RA] Fix lib-recommends-documentation tag to correctly exclude dev
and doc packages. Patch from Stéphane Glondu. (Closes: #548210)
+ [FL] Allow source formats 3.0 (quilt) and 3.0 (native).
(Closes: #552707)
+ + [RA] Multiple maintainer-* and uploader-* tags for syntax errors or
+ localhost addresses are now serious (ftpmaster reject), as are
+ section-is-dh_make-template and bad-relation.
* checks/files.desc:
+ [RA] Add a note to wrong-file-owner-uid-or-gid that it's possible to
construct a Policy-compliant package that triggers this tag by
creating users in preinst, and asking package maintainers to file a
bug against Lintian if they encounter a case where this appears to
be necessary.
+ + [RA] package-contains-ancient-file, package-installs-python-pyc
+ symlink-has-too-many-up-segments, and package-contains-info-dir-file
+ are now serious (ftpmaster reject).
+ + [RA] dir-or-file-in-var-www is now serious/possible (ftpmaster
+ reject unless overridden).
+ + [RA] dir-or-file-in-{tmp,mnt,opt,srv} are now serious and have the
+ proper File Hierarchy Standard cross-references and descriptions.
* checks/lintian.desc:
+ [CW] Add lucid as an allowable distribution for Ubuntu, and remove
gutsy.
@@ -69,6 +111,9 @@ lintian (2.2.18) UNRELEASED; urgency=low
+ [RA] Also suppress failures to break lines if the reported line is
a .UE macro, which marks the end of a block defining a URL. Thanks,
Martin Stigge.
+ * checks/rules.desc:
+ + [RA] missing-build-dependency is now serious/possible (ftpmaster
+ reject unless overridden).
* checks/scripts.desc:
+ [RA] Add some more details to executable-not-elf-or-script about
possible causes and how to correct them.
diff --git a/t/tests/binaries-general/tags b/t/tests/binaries-general/tags
index 5347f89..c61dcf9 100644
--- a/t/tests/binaries-general/tags
+++ b/t/tests/binaries-general/tags
@@ -1,7 +1,7 @@
E: binaries-general: arch-dependent-file-in-usr-share ./usr/share/foo/basic
+E: binaries-general: binary-or-shlib-defines-rpath ./usr/lib/foo/basiclibrpath /usr/lib
+E: binaries-general: binary-or-shlib-defines-rpath ./usr/share/foo/basic /usr/local/lib
E: binaries-general: debug-symbols-directly-in-usr-lib-debug ./usr/lib/debug/basic
E: binaries-general: library-in-debug-or-profile-should-not-be-stripped ./usr/lib/debug/usr/share/foo/basic
W: binaries-general: binary-compiled-with-profiling-enabled ./usr/share/foo/basic
-W: binaries-general: binary-or-shlib-defines-rpath ./usr/lib/foo/basiclibrpath /usr/lib
-W: binaries-general: binary-or-shlib-defines-rpath ./usr/share/foo/basic /usr/local/lib
W: binaries-general: debug-package-should-be-named-dbg usr/lib/debug/basic
diff --git a/t/tests/generic-dh-make-2008/tags b/t/tests/generic-dh-make-2008/tags
index fe6ea15..3225987 100644
--- a/t/tests/generic-dh-make-2008/tags
+++ b/t/tests/generic-dh-make-2008/tags
@@ -1,3 +1,4 @@
+E: generic-dh-make-2008: copyright-contains-dh_make-todo-boilerplate
E: generic-dh-make-2008: description-is-dh_make-template
E: generic-dh-make-2008: helper-templates-in-copyright
E: generic-dh-make-2008: helper-templates-in-copyright
@@ -30,7 +31,6 @@ W: generic-dh-make-2008 source: dh-make-template-in-source debian/watch.ex
W: generic-dh-make-2008 source: out-of-date-standards-version 3.7.3 (current is CURRENT)
W: generic-dh-make-2008 source: superfluous-clutter-in-homepage <insert the upstream URL, if relevant>
W: generic-dh-make-2008: bad-homepage <insert the upstream URL, if relevant>
-W: generic-dh-make-2008: copyright-contains-dh_make-todo-boilerplate
W: generic-dh-make-2008: copyright-has-url-from-dh_make-boilerplate
W: generic-dh-make-2008: copyright-without-copyright-notice
W: generic-dh-make-2008: new-package-should-close-itp-bug
diff --git a/testset/tags.debconf b/testset/tags.debconf
index ad13cc1..88d7fe7 100644
--- a/testset/tags.debconf
+++ b/testset/tags.debconf
@@ -1,7 +1,11 @@
E: debconf source: declares-possibly-conflicting-debhelper-compat-versions rules=4 compat=4
E: debconf source: missing-dh_python-build-dependency
+E: debconf-test-noscripts: copyright-contains-dh_make-todo-boilerplate
E: debconf-test-noscripts: no-debconf-config
+E: debconf-test-postinst: copyright-contains-dh_make-todo-boilerplate
E: debconf-test-postinst: no-debconf-config
+E: debconf-test-preinst: copyright-contains-dh_make-todo-boilerplate
+E: debconf-test: copyright-contains-dh_make-todo-boilerplate
E: debconf-test: extended-description-is-empty
E: debconf-test: mismatch-translated-choices debconf/testmulti-escape choices-de.utf-8
E: debconf-test: no-template-description debconf/no-description
@@ -41,19 +45,15 @@ W: debconf source: template-uses-unsplit-choices debconf-test - debconf/testmult
W: debconf source: translated-default-field debconf-test.templates: 67
W: debconf source: translated-default-field debconf-test.templates: 72
W: debconf source: unknown-encoding-in-po-file debian/po/fr.po
-W: debconf-test-noscripts: copyright-contains-dh_make-todo-boilerplate
W: debconf-test-noscripts: old-fsf-address-in-copyright-file
W: debconf-test-noscripts: postrm-does-not-purge-debconf
-W: debconf-test-postinst: copyright-contains-dh_make-todo-boilerplate
W: debconf-test-postinst: old-fsf-address-in-copyright-file
W: debconf-test-postinst: possible-debconf-note-abuse postinst:6 debconf/test
W: debconf-test-postinst: postinst-uses-db-input
-W: debconf-test-preinst: copyright-contains-dh_make-todo-boilerplate
W: debconf-test-preinst: loads-obsolete-confmodule preinst:5 /usr/share/debconf/confmodule.sh
W: debconf-test-preinst: missing-debconf-dependency-for-preinst
W: debconf-test-preinst: old-fsf-address-in-copyright-file
W: debconf-test-preinst: possible-debconf-note-abuse preinst:9 debconf/test
-W: debconf-test: copyright-contains-dh_make-todo-boilerplate
W: debconf-test: making-assumptions-about-interfaces-in-templates debconf/testboolean
W: debconf-test: malformed-prompt-in-templates debconf/teststring
W: debconf-test: malformed-question-in-templates debconf/should-be-no-longer-a-problem
diff --git a/testset/tags.relations b/testset/tags.relations
index 4ac458f..d28bd61 100644
--- a/testset/tags.relations
+++ b/testset/tags.relations
@@ -35,6 +35,7 @@ I: relations source: build-depends-without-arch-dep foo
I: relations source: build-depends-without-arch-dep libc6-dev
I: relations source: build-depends-without-arch-dep mail-transport-agent
I: relations source: ored-build-depends-on-obsolete-package build-depends-indep: gs
+I: relations-multiple-libs: description-synopsis-might-not-be-phrased-properly
I: relations-multiple-libs: ored-depends-on-obsolete-package suggests: gs
I: relations: ored-depends-on-obsolete-package recommends: gs-aladdin
W: relations source: bad-homepage lintian.debian.org
@@ -55,7 +56,6 @@ W: relations source: timewarp-standards-version (2007-12-02 < 2007-12-03)
W: relations source: virtual-package-depends-without-real-package-depends build-depends: mail-transport-agent
W: relations-multiple-libs: bad-homepage lintian.debian.org
W: relations-multiple-libs: breaks-without-version libpng2
-W: relations-multiple-libs: description-synopsis-might-not-be-phrased-properly
W: relations-multiple-libs: redundant-bugs-field
W: relations-multiple-libs: redundant-origin-field
W: relations: bad-homepage lintian.debian.org
diff --git a/testset/tags.scripts b/testset/tags.scripts
index e26eb29..70ac483 100644
--- a/testset/tags.scripts
+++ b/testset/tags.scripts
@@ -10,6 +10,7 @@ E: scripts: init.d-script-has-duplicate-lsb-section /etc/init.d/lsb-broken
E: scripts: init.d-script-has-unterminated-lsb-section /etc/init.d/lsb-broken:15
E: scripts: missing-dep-for-interpreter jruby => jruby | jruby1.0 | jruby1.1 | jruby1.2 (./usr/bin/jruby-broken)
E: scripts: missing-dep-for-interpreter lefty => graphviz (./usr/bin/lefty-foo)
+E: scripts: package-installs-python-pyc usr/lib/python2.3/site-packages/test.pyc
E: scripts: php-script-but-no-phpX-cli-dep ./usr/share/scripts/php5foo
E: scripts: php-script-but-no-phpX-cli-dep ./usr/share/scripts/phpfoo
E: scripts: python-script-but-no-python-dep ./usr/bin/py2foo
@@ -76,7 +77,6 @@ W: scripts: maintainer-script-empty preinst
W: scripts: maintainer-script-ignores-errors postinst
W: scripts: non-standard-executable-perm usr/bin/perl-bizarre-3 0754 != 0755
W: scripts: non-standard-setuid-executable-perm usr/bin/suidperlfoo 4555
-W: scripts: package-installs-python-pyc usr/lib/python2.3/site-packages/test.pyc
W: scripts: script-uses-bin-env ./usr/bin/envfoo
W: scripts: script-with-language-extension usr/bin/test.sh
W: scripts: setuid-binary usr/bin/suidperlfoo 4555 root/root
--
Debian package checker
Reply to: