diff options
Diffstat (limited to 'tags/u/uses-dpkg-database-directly.tag')
-rw-r--r-- | tags/u/uses-dpkg-database-directly.tag | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/tags/u/uses-dpkg-database-directly.tag b/tags/u/uses-dpkg-database-directly.tag new file mode 100644 index 0000000..d00f4b5 --- /dev/null +++ b/tags/u/uses-dpkg-database-directly.tag @@ -0,0 +1,13 @@ +Tag: uses-dpkg-database-directly +Severity: warning +Check: files/contents +Explanation: The listed file or maintainer script appears to access the + internal database(s) of dpkg. + . + The entire dpkg database, its layout and files are an internal + interface and no program or package should be accessing it, other + than dpkg itself and the suite of dpkg tools. + . + Whilst the files may be editable by an admin, that's a supported (but + unrecommended) feature reserved for humans and not for automatic tools. +See-Also: https://wiki.debian.org/DpkgConffileHandling |