summaryrefslogtreecommitdiffstats
path: root/tags/u/uses-dpkg-database-directly.tag
diff options
context:
space:
mode:
Diffstat (limited to 'tags/u/uses-dpkg-database-directly.tag')
-rw-r--r--tags/u/uses-dpkg-database-directly.tag13
1 files changed, 13 insertions, 0 deletions
diff --git a/tags/u/uses-dpkg-database-directly.tag b/tags/u/uses-dpkg-database-directly.tag
new file mode 100644
index 0000000..d00f4b5
--- /dev/null
+++ b/tags/u/uses-dpkg-database-directly.tag
@@ -0,0 +1,13 @@
+Tag: uses-dpkg-database-directly
+Severity: warning
+Check: files/contents
+Explanation: The listed file or maintainer script appears to access the
+ internal database(s) of dpkg.
+ .
+ The entire dpkg database, its layout and files are an internal
+ interface and no program or package should be accessing it, other
+ than dpkg itself and the suite of dpkg tools.
+ .
+ Whilst the files may be editable by an admin, that's a supported (but
+ unrecommended) feature reserved for humans and not for automatic tools.
+See-Also: https://wiki.debian.org/DpkgConffileHandling