Your message dated Thu, 20 Feb 2025 20:10:10 +0000 with message-id <e1tlcs6-00gm11...@fasolo.debian.org> and subject line Bug#1074014: fixed in debian-policy 4.7.1.0 has caused the Debian Bug report #1074014, regarding encode mandatory merged-/usr into policy to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 1074014: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1074014 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: debian-policy Version: 4.7.0.0 X-Debbugs-Cc: bl...@debian.org,m...@debian.org,mbi...@debian.org,z...@debian.org Hi, given the progress we have made with /usr-move and DEP17, I think it is time to consider encoding the changes into policy. As of this writing, there are 216 source packages in unstable that still install into aliased locations and their number has been dropping since a while. All but very few packages have bug reports of important severity and will have their severity upgraded to serious on August 6th. Generally speaking DEP17 says that no package should install any files below /bin/, /lib*/ and /sbin/. Doing so would amount to a symlink vs directory conflict between base-files which now installs symlinks at the relevant locations. What happens with these locations depends on the order of unpacks. In many cases, this is not a problem, because base-files is essential and thus unpacked early. Other than that, running dpkg-deb -x foo.deb / causes these symlinks to be overwritten with actual directories possibly breaking the installation. We currently have mitigations for these problems in place and plan to drop them after trixie. For these reasons, I propose changing section 10.1 and encoding the avoidance of symlink vs directory conflicts into policy. To get a discussion going, I suggest the following update. - To support merged-/usr systems, packages must not install files in both - /path and /usr/path. For example, a package must not install both - /bin/example and /usr/bin/example. + Since base-files implements mandatory merged-/usr by installing the + aliasing symbolic links, other packages must not install files into + aliased paths such as /bin, /lib, /lib* or /sbin. The package manager is + not prepared to deal with such aliasing and in prohibiting the + installation into aliased locations, we avoid triggering undefined + behaviour. Conversely, packages may assume that /bin, /lib and /sbin are + symlinks at all times and that their files below /usr/bin, /usr/lib and + /usr/sbin are also accessible via their aliased locations. I suspect that this is not perfect, but it is hopefully good enough for entering the discussion. Questions: 1. Do you agree that policy should be changed? If yes: 2. Do you agree that policy should prohibit installing into aliased paths? 3. Do you agree that the current progress is sufficient for changing policy? If not, when can we change policy? 4. Do you agree with the proposed wording? Can you suggest improvements? 5. Given earlier disagreement on this matter, should we discuss this matter in a wider setting such as d-devel? Thanks for considering Helmut
--- End Message ---
--- Begin Message ---Source: debian-policy Source-Version: 4.7.1.0 Done: Sean Whitton <spwhit...@spwhitton.name> We believe that the bug you reported is fixed in the latest version of debian-policy, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1074...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sean Whitton <spwhit...@spwhitton.name> (supplier of updated debian-policy package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 20 Feb 2025 17:44:53 +0800 Binary: debian-policy debian-policy-ja debian-policy-zh-cn Source: debian-policy Architecture: all source Version: 4.7.1.0 Distribution: unstable Urgency: medium Maintainer: Debian Policy Editors <debian-policy@lists.debian.org> Changed-By: Sean Whitton <spwhit...@spwhitton.name> Closes: 1074014 1075856 1089110 1091913 1094664 1098339 Description: debian-policy - Debian Policy Manual and related documents debian-policy-ja - Debian Policy Manual and related documents (Japanese) debian-policy-zh-cn - Debian Policy Manual and related documents (Simplified Chinese) Changes: debian-policy (4.7.1.0) unstable; urgency=medium . [ Fei Ding & Ke Zhang ] * New Simplified Chinese translation. . [ Sean Whitton ] * Install new translation in new binary package. * Merge two duplicate sets of .po files, locales/ & policy/locale/. * Policy: Clarify filename conflicts for programs Wording: Chris Hofstaedtler <z...@debian.org> Seconded: Helmut Grohne <hel...@subdivi.de> Seconded: Jochen Sprickerhof <jspri...@debian.org> Seconded: Holger Levsen <hol...@layer-acht.org> Closes: #1075856 * 5.6.31: Update default value of Rules-Requires-Root (Closes: #1091913). Thanks to Niels Thykier for the report. * Policy: Packages must/should not require man, info and locale files Wording: Josh Triplett <j...@joshtriplett.org> Seconded: Sean Whitton <spwhit...@spwhitton.name> Seconded: Mattia Rizzolo <mat...@debian.org> Closes: #1089110 * Policy: Packages must not install to /bin, /lib, /lib* or /sbin Wording: Helmut Grohne <hel...@subdivi.de> Seconded: Russ Allbery <r...@debian.org> Seconded: Sam Hartman <hartm...@debian.org> Seconded: Luca Boccassi <bl...@debian.org> Seconded: Chris Hofstaedtler <z...@debian.org> Seconded: Holger Levsen <hol...@layer-acht.org> Seconded: Michael Biebl <bi...@debian.org> Seconded: Jochen Sprickerhof <jspri...@debian.org> Closes: #1074014 - Rewrite Helmut's text to avoid mentioning the merged-/usr transition by name, and to avoid the transition-specific "aliased paths" jargon. My hope is that this will be better for future readers. * 10.1: Delete paragraph about compatibility symlinks /path -> /usr/path. This paragraph is effectively superseded by the preceding Policy change. * Fix formatting issue in 10.2 (Closes: #1094664). Thanks to Roberto C. Sanchez for the report. * Fix typo in 2.2.2 (Closes: #1098339). Thanks to Ahmed Siam for the report. Checksums-Sha1: f7989401ee409df829dd0638b17191a21544aaf8 2204 debian-policy_4.7.1.0.dsc 7d697ab6f4e3007e8a7181ad94ca18d29052750a 575360 debian-policy_4.7.1.0.tar.xz 5c3b55b56dd23072ecffd4f5f4f24c3cd348cdf5 443660 debian-policy-ja_4.7.1.0_all.deb e5aa420b2848708d06709c8a2ad456dc312b3299 436664 debian-policy-zh-cn_4.7.1.0_all.deb 09a16e26f379f7b0c72eb33978794826176f0c26 2408020 debian-policy_4.7.1.0_all.deb 6f70c081c30643274fcd7f820e30c09811f4848e 15398 debian-policy_4.7.1.0_amd64.buildinfo Checksums-Sha256: 8598c5a0bbe60502587fe28d2b408279c4e719de905d75d8de01007aac34988e 2204 debian-policy_4.7.1.0.dsc 1ea69d75fd4d57136ecc49981ec092aee2a127ab966be7886978e9b3b22f693d 575360 debian-policy_4.7.1.0.tar.xz ea56033162aed9679e1da29f21aaaa06b2b7fd5015ac19ad5fa54e7ddd8cfbc7 443660 debian-policy-ja_4.7.1.0_all.deb dc35a78fd82ea067815f236471b571eb43ae9568ff3844394bab1540fd897c6b 436664 debian-policy-zh-cn_4.7.1.0_all.deb d8a4d2cac2c9764d113816151568fac1b3b77151c3588b12adf6cab7ef0ed0bb 2408020 debian-policy_4.7.1.0_all.deb fb2cd827fb473b7382487c4b9a9f77a9d3a4ced7f50dea639380b59dad3710e0 15398 debian-policy_4.7.1.0_amd64.buildinfo Files: 9df1607d9f780b6ff37b3bad153e6180 2204 doc optional debian-policy_4.7.1.0.dsc 016c8fef7e324c94d61c17bcc204d6cb 575360 doc optional debian-policy_4.7.1.0.tar.xz c1e755a95b0480dee01158bd9a22b0ac 443660 doc optional debian-policy-ja_4.7.1.0_all.deb aad9e400f72016ffb3e3c763b2ad766c 436664 doc optional debian-policy-zh-cn_4.7.1.0_all.deb f88f37b604da99d4071320bf9b8b2843 2408020 doc optional debian-policy_4.7.1.0_all.deb 15ab3c9479c265bb5d9935e78d841b01 15398 doc optional debian-policy_4.7.1.0_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEm5FwB64DDjbk/CSLaVt65L8GYkAFAme2+ugACgkQaVt65L8G YkAp9A/+Pw0CZDCEMSJuccw7MYvTGR4gflB5Xt1Srpf+ksYUOBeQpcoVkYtq3oSQ 2wupwf3tUQSkuz6BvlEEjNDsoz5aFev25MRUIzZ+4PFdzNXcuR3JDvhDumPekPWq Z2qW2sAyUnLj5hYguFc5WQJX5BgDGZlO3ycHOFCCX7A2CM9h4kn8zfVhaXGFriqq myYcxr6CyNBHeFbQs6wvG72GfhxEU13CFRlnCaXCrO2QNj4oP8tyr2t+Do2oYCVR ZuDVEawTFRY2VKL5CWiGmwFln7T0lG+P0bXAEXXus9o3ewlDnTtlLiflxxnp1xkO c9GGGIVEZ9gDQffdizOvJPcLJrSroGeYfZShsxHsqpAOrXBkrM0XP1COrpXwp5S5 UqXrUwihEEmPidf0irq2Di2RCvgGxdkHRpys8VSxfHAU8uoflJ4UOE3rbfLxjzjp gWm//ccAhpl3PBI+Udk+8wxyDU7SRcbsQf09pIBkhHbMVKSbES+u1pVAoo33K0Cu 98cyhE7q7DgXsHxClOD3ClDVNx/M8fEejuSSEq7t1CF6Ggr2vALqMMvfCcJTalwO wMN0/6lk+TvS4Opy2waIR2KXVURSfxlRcperPrZwmFwS9DVHVTEGobWW1TROnZ1d 80B25KW8Iz3DYFwAffZPKuire5lQMFkSBc3IHgCBfxXSlfyvAB0= =FmXY -----END PGP SIGNATURE-----
pgpFq8xNUu27_.pgp
Description: PGP signature
--- End Message ---
