[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

imp blows away hand-edited changes in /etc/imp/defaults.php3



Package: imp
Version: 1:2.2.0.pre5-9.2
Severity: Critical

extremely evil misuse of debconf results in hand-edited changes to imp's
config file being blown away by the postinst script.

HAND-EDITED CONFIGURATION FILES SHOULD NEVER BE BLOWN AWAY BY ANY
CONFIGURATOR SCRIPT.  EVER.  FOR ANY REASON.

at the very least, they should ask for permission first.

this bug highlights a very serious flaw in debconf - not in the design,
but in the manner in which it can be misused by a package maintainer.
blowing away custom edits is evil and should be forbidden by policy.

craig

--
craig sanders


Reply to: