Source: bootcd Source-Version: 5.13 Severity: important User: debian-d...@lists.debian.org Usertags: dpkg-db-access-blocker
Hi! This package contains a couple of scripts, which directly access the dpkg internal database, instead of using one of the public interfaces provided by dpkg. The code in «bootcdinitramfshook» should be switched to use «dpkg-query --listfiles PKGNAME», and the «bootcd-check.lib», switched to use «dpkg-query ---show PKGNAME» to check whether the package is installed (ex. by using the db:Status-Status pseudo field). This is a problem for several reasons, because even though the layout and format of the dpkg database is administrator friendly, and it is expected that those might need to mess with it, in case of emergency, this “interface” does not extend to other programs besides the dpkg suite of tools. The admindir can also be configured differently at dpkg build or run-time. And finally, the contents and its format, will be changing in the near future. Thanks, Guillem
