[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#902612: Packages should not touch users' home directories



Package: debian-policy
Version: 4.1.4.2

Hello,

On Thu, Jun 28 2018, Simon McVittie wrote:

> On Sat, 23 Jun 2018 at 21:05:07 +0100, Sean Whitton wrote:
>> 1.  FHS 3.0 allows distributions to create directory hierarchies
>> under
>>     user's home directories conforming to the XDG Base Directories or
>>     the GLib conventions on user directory contents.
>>
>>     We don't permit packages to install to home directories or
>>     maintscripts to touch home directories, so maybe we need to add
>>     an exception saying that packages can't actually do this (of
>>     course, programs installed by those packages can do it).
>
> OK. Something like this?
>
>     Packages must not contain files in /home, and packages' maintainer
>     scripts must not write to users' home directories. The programs in
>     those packages may create directory hierarchies as described in
>     §3.8.3 "Home Directory Specifications and Conventions" when run by
>     a user.
>
> I'm not so sure whether this belongs in the FHS section?

Indeed.  I thought that the requirement that packages don't contain
files in /home was in Policy already, but it seems that it is not.

So filing as a separate bug.

> I think it's a point about how our packages are required to behave,
> rather than about the directories that can exist and their
> purposes. The directory hierarchies are still the same, regardless of
> how they're created.

The wording of FHS is not about directories that can exist -- it says
that distributions "can create" or "may create" the dirs.  That's what
we want to forbid.

-- 
Sean Whitton

Attachment: signature.asc
Description: PGP signature


Reply to: