Rejected: Bug#203650: Poor recommendation in dpkg-statoverride section
This proposal concerns packages that need to have files owned by a
dynamically created user. Currently, Policy recommends use of
dpkg-statoverride in postinst to change the ownership to the dynamically
created user after the user has been created. This Policy proposal would
instead create the user in preinst and ship the package with files already
owned by the dynamic user (by name) in the *.deb file so that when it was
unpacked, the files would already be correctly owned.
In the discussion of this proposal, multiple problems were identified,
ranging from needing to Pre-Depend on adduser to the difficulty of
creating Debian packages with files owned by a dynamically created user.
So far as I can tell from the bug log, none of those problems have been
addressed and making this change would still be quite challenging from a
technical perspective.
Given that the Policy change is premature until the technical difficulties
with implementing this change have been ironed out, I'm rejecting this
proposal at this time. Anyone is welcome to re-propose this change once
the technical problems have been resolved (assuming that there is
consensus to do the technical work that this change would require).
--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>
Reply to: