[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1074014: marked as done (encode mandatory merged-/usr into policy)

Your message dated Thu, 20 Feb 2025 20:10:10 +0000
with message-id <E1tlCs6-00GM11-9l@fasolo.debian.org>
and subject line Bug#1074014: fixed in debian-policy 4.7.1.0
has caused the Debian Bug report #1074014,
regarding encode mandatory merged-/usr into policy
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1074014: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1074014
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: debian-policy
Version: 4.7.0.0
X-Debbugs-Cc: bluca@debian.org,md@debian.org,mbiebl@debian.org,zeha@debian.org

Hi,

given the progress we have made with /usr-move and DEP17, I think it is
time to consider encoding the changes into policy. As of this writing,
there are 216 source packages in unstable that still install into
aliased locations and their number has been dropping since a while. All
but very few packages have bug reports of important severity and will
have their severity upgraded to serious on August 6th.

Generally speaking DEP17 says that no package should install any files
below /bin/, /lib*/ and /sbin/. Doing so would amount to a symlink vs
directory conflict between base-files which now installs symlinks at the
relevant locations. What happens with these locations depends on the
order of unpacks. In many cases, this is not a problem, because
base-files is essential and thus unpacked early. Other than that,
running dpkg-deb -x foo.deb / causes these symlinks to be overwritten
with actual directories possibly breaking the installation. We currently
have mitigations for these problems in place and plan to drop them after
trixie.

For these reasons, I propose changing section 10.1 and encoding the
avoidance of symlink vs directory conflicts into policy. To get a
discussion going, I suggest the following update.

- To support merged-/usr systems, packages must not install files in both
- /path and /usr/path. For example, a package must not install both
- /bin/example and /usr/bin/example.
+ Since base-files implements mandatory merged-/usr by installing the
+ aliasing symbolic links, other packages must not install files into
+ aliased paths such as /bin, /lib, /lib* or /sbin. The package manager is
+ not prepared to deal with such aliasing and in prohibiting the
+ installation into aliased locations, we avoid triggering undefined
+ behaviour. Conversely, packages may assume that /bin, /lib and /sbin are
+ symlinks at all times and that their files below /usr/bin, /usr/lib and
+ /usr/sbin are also accessible via their aliased locations.

I suspect that this is not perfect, but it is hopefully good enough for
entering the discussion.

Questions:
 1. Do you agree that policy should be changed?

 If yes:

 2. Do you agree that policy should prohibit installing into aliased
    paths?
 3. Do you agree that the current progress is sufficient for changing
    policy? If not, when can we change policy?
 4. Do you agree with the proposed wording? Can you suggest
    improvements?
 5. Given earlier disagreement on this matter, should we discuss this
    matter in a wider setting such as d-devel?

Thanks for considering

Helmut

--- End Message ---
--- Begin Message --- 
Source: debian-policy
Source-Version: 4.7.1.0
Done: Sean Whitton <spwhitton@spwhitton.name>

We believe that the bug you reported is fixed in the latest version of
debian-policy, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1074014@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sean Whitton <spwhitton@spwhitton.name> (supplier of updated debian-policy package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 20 Feb 2025 17:44:53 +0800
Binary: debian-policy debian-policy-ja debian-policy-zh-cn
Source: debian-policy
Architecture: all source
Version: 4.7.1.0
Distribution: unstable
Urgency: medium
Maintainer: Debian Policy Editors <debian-policy@lists.debian.org>
Changed-By: Sean Whitton <spwhitton@spwhitton.name>
Closes: 1074014 1075856 1089110 1091913 1094664 1098339
Description:
 debian-policy - Debian Policy Manual and related documents
 debian-policy-ja - Debian Policy Manual and related documents (Japanese)
 debian-policy-zh-cn - Debian Policy Manual and related documents (Simplified Chinese)
Changes:
 debian-policy (4.7.1.0) unstable; urgency=medium
 .
   [ Fei Ding & Ke Zhang ]
   * New Simplified Chinese translation.
 .
   [ Sean Whitton ]
   * Install new translation in new binary package.
   * Merge two duplicate sets of .po files, locales/ & policy/locale/.
   * Policy: Clarify filename conflicts for programs
     Wording: Chris Hofstaedtler <zeha@debian.org>
     Seconded: Helmut Grohne <helmut@subdivi.de>
     Seconded: Jochen Sprickerhof <jspricke@debian.org>
     Seconded: Holger Levsen <holger@layer-acht.org>
     Closes: #1075856
   * 5.6.31: Update default value of Rules-Requires-Root (Closes: #1091913).
     Thanks to Niels Thykier for the report.
   * Policy: Packages must/should not require man, info and locale files
     Wording: Josh Triplett <josh@joshtriplett.org>
     Seconded: Sean Whitton <spwhitton@spwhitton.name>
     Seconded: Mattia Rizzolo <mattia@debian.org>
     Closes: #1089110
   * Policy: Packages must not install to /bin, /lib, /lib* or /sbin
     Wording: Helmut Grohne <helmut@subdivi.de>
     Seconded: Russ Allbery <rra@debian.org>
     Seconded: Sam Hartman <hartmans@debian.org>
     Seconded: Luca Boccassi <bluca@debian.org>
     Seconded: Chris Hofstaedtler <zeha@debian.org>
     Seconded: Holger Levsen <holger@layer-acht.org>
     Seconded: Michael Biebl <biebl@debian.org>
     Seconded: Jochen Sprickerhof <jspricke@debian.org>
     Closes: #1074014
     - Rewrite Helmut's text to avoid mentioning the merged-/usr transition
       by name, and to avoid the transition-specific "aliased paths" jargon.
       My hope is that this will be better for future readers.
   * 10.1: Delete paragraph about compatibility symlinks /path -> /usr/path.
     This paragraph is effectively superseded by the preceding Policy change.
   * Fix formatting issue in 10.2 (Closes: #1094664).
     Thanks to Roberto C. Sanchez for the report.
   * Fix typo in 2.2.2 (Closes: #1098339).
     Thanks to Ahmed Siam for the report.
Checksums-Sha1:
 f7989401ee409df829dd0638b17191a21544aaf8 2204 debian-policy_4.7.1.0.dsc
 7d697ab6f4e3007e8a7181ad94ca18d29052750a 575360 debian-policy_4.7.1.0.tar.xz
 5c3b55b56dd23072ecffd4f5f4f24c3cd348cdf5 443660 debian-policy-ja_4.7.1.0_all.deb
 e5aa420b2848708d06709c8a2ad456dc312b3299 436664 debian-policy-zh-cn_4.7.1.0_all.deb
 09a16e26f379f7b0c72eb33978794826176f0c26 2408020 debian-policy_4.7.1.0_all.deb
 6f70c081c30643274fcd7f820e30c09811f4848e 15398 debian-policy_4.7.1.0_amd64.buildinfo
Checksums-Sha256:
 8598c5a0bbe60502587fe28d2b408279c4e719de905d75d8de01007aac34988e 2204 debian-policy_4.7.1.0.dsc
 1ea69d75fd4d57136ecc49981ec092aee2a127ab966be7886978e9b3b22f693d 575360 debian-policy_4.7.1.0.tar.xz
 ea56033162aed9679e1da29f21aaaa06b2b7fd5015ac19ad5fa54e7ddd8cfbc7 443660 debian-policy-ja_4.7.1.0_all.deb
 dc35a78fd82ea067815f236471b571eb43ae9568ff3844394bab1540fd897c6b 436664 debian-policy-zh-cn_4.7.1.0_all.deb
 d8a4d2cac2c9764d113816151568fac1b3b77151c3588b12adf6cab7ef0ed0bb 2408020 debian-policy_4.7.1.0_all.deb
 fb2cd827fb473b7382487c4b9a9f77a9d3a4ced7f50dea639380b59dad3710e0 15398 debian-policy_4.7.1.0_amd64.buildinfo
Files:
 9df1607d9f780b6ff37b3bad153e6180 2204 doc optional debian-policy_4.7.1.0.dsc
 016c8fef7e324c94d61c17bcc204d6cb 575360 doc optional debian-policy_4.7.1.0.tar.xz
 c1e755a95b0480dee01158bd9a22b0ac 443660 doc optional debian-policy-ja_4.7.1.0_all.deb
 aad9e400f72016ffb3e3c763b2ad766c 436664 doc optional debian-policy-zh-cn_4.7.1.0_all.deb
 f88f37b604da99d4071320bf9b8b2843 2408020 doc optional debian-policy_4.7.1.0_all.deb
 15ab3c9479c265bb5d9935e78d841b01 15398 doc optional debian-policy_4.7.1.0_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=FmXY
-----END PGP SIGNATURE-----

Attachment: pgpNitCrwnOUd.pgp
Description: PGP signature


--- End Message ---
Reply to: