[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#305192: [CONFFILE][TRIVIAL] dpkg allow overwrite files by default



Package: dpkg
Version: 1.10.27
Severity: grave

Default dpkg.conf include force-overwrite. This is improper. All "force"
options must be setted by admin explicitly.

Severity is grave because this can lead to significant data lost in unstable 
distrib. For instance, package ia32libs version 1.1 in amd64 distr 
suddenly overwrite many /bin/* files from coreutils.

Also add /etc/dpkg/dpkg.cfg as conf file instead of copy in dpkg.postinst.
It is strange to see such vilolation package packing in package dpkg.

-- System Information:
Debian Release: 3.1
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.11-9-amd64-k8
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)

Versions of packages dpkg depends on:
ii  dselect                     1.10.27      a user tool to manage Debian packa
ii  libc6                       2.3.2.ds1-21 GNU C Library: Shared libraries an

-- no debconf information



Reply to: