Source: lintian Version: 2.5.30+deb8u3 Severity: wishlist Tags: patch User: [email protected] Usertags: toolchain X-Debbugs-Cc: [email protected]
Hi, Given the recent work on the "reproducible builds" effort [1], I think it would be a good idea to increase the severity -- and thus the visibility -- of the package-contains-timestamped-gzip tag. My loose rationale is that assuming that most maintainers would now be fine with receiving a bug with a patch correcting such an issue, it is reasonable for this to be a bit "louder" in Lintian. [1]: https://wiki.debian.org/ReproducibleBuilds Regards, -- ,''`. : :' : Chris Lamb `. `'` [email protected] / chris-lamb.co.uk `-
diff --git a/checks/files.desc b/checks/files.desc index c6b8949..0152d87 100644 --- a/checks/files.desc +++ b/checks/files.desc @@ -1585,7 +1585,7 @@ Info: This package ships a PKCS#11 module configuration file under convention and may ignore them in the future. Tag: package-contains-timestamped-gzip -Severity: wishlist +Severity: normal Certainty: certain Info: The package contains a gzip-compressed file that has timestamps. Such files make the packages unreproducible, because their diff --git a/t/tests/files-gzip/tags b/t/tests/files-gzip/tags index e003044..4e467c7 100644 --- a/t/tests/files-gzip/tags +++ b/t/tests/files-gzip/tags @@ -1,3 +1,3 @@ -I: files-gzip: package-contains-timestamped-gzip etc/good.gz +W: files-gzip: package-contains-timestamped-gzip etc/good.gz W: files-gzip: gz-file-not-gzip etc/bad.gz W: files-gzip: gz-file-not-gzip usr/share/doc/files-gzip/changelog.gz

