diff options
Diffstat (limited to 'tags/r/read-in-maintainer-script.tag')
| -rw-r--r-- | tags/r/read-in-maintainer-script.tag | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/tags/r/read-in-maintainer-script.tag b/tags/r/read-in-maintainer-script.tag new file mode 100644 index 0000000..1127ec4 --- /dev/null +++ b/tags/r/read-in-maintainer-script.tag @@ -0,0 +1,14 @@ +Tag: read-in-maintainer-script +Severity: error +Check: scripts +Explanation: The given maintainer script appears to use <code>read</code> to + get information from the user. Prompting in maintainer scripts must be done + by communicating through a utility that conforms to the Debian configuration + management specification, version 2 or higher. The <code>debconf</code> + program is a popular choice. + . + With this tag, there is a potential for false positives. For example, + <code>read</code> could be used in a block with redirection, in a function + in a pipe, or when standard input is provided in an unusual way. +See-Also: + debian-policy 3.9.1 |