Bug#954021: Please detect use of staff group (and 2775 permissions) in maintainer scripts without checking staff-group-for-usr-local

[Felix Lechner <felix.lechner@lease-up.com>]

Hi Josh,

On Sun, Mar 15, 2020 at 1:18 PM Josh Triplett <josh@joshtriplett.org> wrote:
>
> Policy version 4.1.4, in April 2018, states that /usr/local and subdirectories
> should only have group "staff" if /etc/staff-group-for-usr-local exists,
> and otherwise they should have group "root". Many packages still
> unconditionally chown directories to root:staff, or chmod directories to
> 2755.

What is an acceptable way to identify such scripts? Would it be a
successful 'grep root[:.]staff', followed by an unsuccessful 'grep
staff-group-for-usr-local'?

Kind regards,
Felix Lechner