From 75808db17caf8b960b351e3408e74142f4c85aac Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 14 Apr 2024 15:42:30 +0200 Subject: Adding upstream version 2.117.0. Signed-off-by: Daniel Baumann --- tags/w/wayward-symbolic-link-target-in-source.tag | 11 +++++++++++ tags/w/weak-dependency-on-misc-depends.tag | 8 ++++++++ tags/w/weak-library-dev-dependency.tag | 21 +++++++++++++++++++++ ...-application-depends-on-apache2-data-package.tag | 10 ++++++++++ tags/w/web-application-works-only-with-apache.tag | 10 ++++++++++ tags/w/whitespace-after-continuation-character.tag | 9 +++++++++ tags/w/wiki-copyright-format-uri.tag | 9 +++++++++ tags/w/windows-devel-file-in-package.tag | 7 +++++++ tags/w/windows-thumbnail-database-in-package.tag | 8 ++++++++ tags/w/wish-script-but-no-wish-dep.tag | 9 +++++++++ tags/w/wrong-bug-number-in-closes.tag | 5 +++++ tags/w/wrong-compression-in-manual-page.tag | 6 ++++++ tags/w/wrong-file-owner-uid-or-gid.tag | 14 ++++++++++++++ tags/w/wrong-manual-section.tag | 8 ++++++++ .../wrong-name-for-changelog-of-native-package.tag | 7 +++++++ tags/w/wrong-name-for-debian-changelog-file.tag | 6 ++++++ tags/w/wrong-name-for-debian-news-file.tag | 7 +++++++ tags/w/wrong-name-for-manual-page.tag | 7 +++++++ tags/w/wrong-name-for-upstream-changelog.tag | 6 ++++++ tags/w/wrong-path-for-interpreter.tag | 10 ++++++++++ tags/w/wrong-section-according-to-package-name.tag | 5 +++++ tags/w/wrong-section-for-udeb.tag | 4 ++++ tags/w/wrong-team.tag | 8 ++++++++ 23 files changed, 195 insertions(+) create mode 100644 tags/w/wayward-symbolic-link-target-in-source.tag create mode 100644 tags/w/weak-dependency-on-misc-depends.tag create mode 100644 tags/w/weak-library-dev-dependency.tag create mode 100644 tags/w/web-application-depends-on-apache2-data-package.tag create mode 100644 tags/w/web-application-works-only-with-apache.tag create mode 100644 tags/w/whitespace-after-continuation-character.tag create mode 100644 tags/w/wiki-copyright-format-uri.tag create mode 100644 tags/w/windows-devel-file-in-package.tag create mode 100644 tags/w/windows-thumbnail-database-in-package.tag create mode 100644 tags/w/wish-script-but-no-wish-dep.tag create mode 100644 tags/w/wrong-bug-number-in-closes.tag create mode 100644 tags/w/wrong-compression-in-manual-page.tag create mode 100644 tags/w/wrong-file-owner-uid-or-gid.tag create mode 100644 tags/w/wrong-manual-section.tag create mode 100644 tags/w/wrong-name-for-changelog-of-native-package.tag create mode 100644 tags/w/wrong-name-for-debian-changelog-file.tag create mode 100644 tags/w/wrong-name-for-debian-news-file.tag create mode 100644 tags/w/wrong-name-for-manual-page.tag create mode 100644 tags/w/wrong-name-for-upstream-changelog.tag create mode 100644 tags/w/wrong-path-for-interpreter.tag create mode 100644 tags/w/wrong-section-according-to-package-name.tag create mode 100644 tags/w/wrong-section-for-udeb.tag create mode 100644 tags/w/wrong-team.tag (limited to 'tags/w') diff --git a/tags/w/wayward-symbolic-link-target-in-source.tag b/tags/w/wayward-symbolic-link-target-in-source.tag new file mode 100644 index 0000000..b7ee8fb --- /dev/null +++ b/tags/w/wayward-symbolic-link-target-in-source.tag @@ -0,0 +1,11 @@ +Tag: wayward-symbolic-link-target-in-source +Severity: error +Check: files/symbolic-links +Renamed-From: source-contains-unsafe-symlink +Explanation: The named symbolic link in a source package resolves outside + the shipped sources. + . + Please note that this tag is only issued for relative links targets. + Absolute link targets are also disqualified because source packages + are not anchored and can be unpacked anywhere. They triggers another + tag. diff --git a/tags/w/weak-dependency-on-misc-depends.tag b/tags/w/weak-dependency-on-misc-depends.tag new file mode 100644 index 0000000..389eda4 --- /dev/null +++ b/tags/w/weak-dependency-on-misc-depends.tag @@ -0,0 +1,8 @@ +Tag: weak-dependency-on-misc-depends +Severity: warning +Check: debhelper +See-Also: debhelper(7) +Explanation: The source package declares a weak dependency on ${misc:Depends} in + the given binary package's debian/control entry. A stronger dependency, that + is one that ensures the package's installation, is required so that the + additional commands are available to the maintainer scripts when they are run. diff --git a/tags/w/weak-library-dev-dependency.tag b/tags/w/weak-library-dev-dependency.tag new file mode 100644 index 0000000..bdffdc8 --- /dev/null +++ b/tags/w/weak-library-dev-dependency.tag @@ -0,0 +1,21 @@ +Tag: weak-library-dev-dependency +Severity: error +Check: debian/control/prerequisite/development +Explanation: This package seems to contain the development files for a + shared library, but the requirement for that shared library to be installed + does not include the same version. + . + A -dev package should normally use (= ${binary:Version}) + for the prerequisite on the shared library. That will ensure that programs compile + and link properly. The symbolic links for the dynamic linker will also point to the + correct places. + . + To be sure, there are some circumstances when a weak prerequisite is warranted, for + example to prevent the breaking of binNMUs with architecture-independent -dev + packages. Then something like (>= ${source:Upstream-Version}), (<< + ${source:Upstream-Version}+1~) may be the right approach, or possibly + ${source:Version} instead. The goal there is to ensure that a new upstream + version of the library does not satisfy the prerequisite, since any minor version change + might break the *.so links. +See-Also: + debian-policy 8.5 diff --git a/tags/w/web-application-depends-on-apache2-data-package.tag b/tags/w/web-application-depends-on-apache2-data-package.tag new file mode 100644 index 0000000..31d9125 --- /dev/null +++ b/tags/w/web-application-depends-on-apache2-data-package.tag @@ -0,0 +1,10 @@ +Tag: web-application-depends-on-apache2-data-package +Severity: warning +Check: apache2 +Explanation: The package appears to be a web application but declares a package + relation with apache2-bin, apache2-data or any of its + transitional packages. However, web applications are rarely bound to a specific + web server version. Thus, they should depend on apache2 only instead. + If a web application is actually tied to a particular binary version of the web + server a dependency against the virtual apache2-api-YYYYMMDD package + is more appropriate. diff --git a/tags/w/web-application-works-only-with-apache.tag b/tags/w/web-application-works-only-with-apache.tag new file mode 100644 index 0000000..ea2b0d7 --- /dev/null +++ b/tags/w/web-application-works-only-with-apache.tag @@ -0,0 +1,10 @@ +Tag: web-application-works-only-with-apache +Severity: warning +Check: apache2 +Renamed-From: web-application-should-not-depend-unconditionally-on-apache2 +Explanation: The package appears to be a web application but declares a dependency + against apache2 without any alternative. Most web applications should + work with any decent web server, thus such a package should be satisfied if any + web server providing the virtual "httpd" package is installed. This + can be accomplished by declaring a package relation in the form "apache2 | + httpd". diff --git a/tags/w/whitespace-after-continuation-character.tag b/tags/w/whitespace-after-continuation-character.tag new file mode 100644 index 0000000..789351f --- /dev/null +++ b/tags/w/whitespace-after-continuation-character.tag @@ -0,0 +1,9 @@ +Tag: whitespace-after-continuation-character +Severity: error +Check: menu-format +Explanation: The menu item is split up over two or more continuation lines, but + there is additional whitespace after the backslash (\) that + indicates where lines should be joined together. + . + There is no guarantee that such additional whitespace is handled correctly. + The backslash should be the end of the line. diff --git a/tags/w/wiki-copyright-format-uri.tag b/tags/w/wiki-copyright-format-uri.tag new file mode 100644 index 0000000..a28205c --- /dev/null +++ b/tags/w/wiki-copyright-format-uri.tag @@ -0,0 +1,9 @@ +Tag: wiki-copyright-format-uri +Severity: pedantic +Check: debian/copyright/dep5 +See-Also: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ +Explanation: Format URI of the machine-readable copyright file refers to Debian Wiki. + . + Debian Wiki is not used for the format development anymore. Please use + https://www.debian.org/doc/packaging-manuals/copyright-format/*version*/ + as the format URI instead. diff --git a/tags/w/windows-devel-file-in-package.tag b/tags/w/windows-devel-file-in-package.tag new file mode 100644 index 0000000..c09f8c9 --- /dev/null +++ b/tags/w/windows-devel-file-in-package.tag @@ -0,0 +1,7 @@ +Tag: windows-devel-file-in-package +Severity: warning +Check: foreign-operating-systems +Explanation: This package appears to contain development files only meaningful to + Windows environments. Such files are generally useless in Debian packages and + were usually accidentally included by copying complete directories from the + source tarball. diff --git a/tags/w/windows-thumbnail-database-in-package.tag b/tags/w/windows-thumbnail-database-in-package.tag new file mode 100644 index 0000000..e658cb2 --- /dev/null +++ b/tags/w/windows-thumbnail-database-in-package.tag @@ -0,0 +1,8 @@ +Tag: windows-thumbnail-database-in-package +Severity: warning +Check: foreign-operating-systems +Explanation: There is a file in the package named Thumbs.db or + Thumbs.db.gz, which is normally a Windows image thumbnail + database. Such databases are generally useless in Debian packages and + were usually accidentally included by copying complete directories from + the source tarball. diff --git a/tags/w/wish-script-but-no-wish-dep.tag b/tags/w/wish-script-but-no-wish-dep.tag new file mode 100644 index 0000000..bc4f4d2 --- /dev/null +++ b/tags/w/wish-script-but-no-wish-dep.tag @@ -0,0 +1,9 @@ +Tag: wish-script-but-no-wish-dep +Severity: error +Check: scripts +Explanation: Packages that include wish scripts must depend on the virtual + package wish or, if they require a specific version of wish or tk, that + version of tk. + . + In some cases a weaker relationship, such as Suggests or Recommends, will + be more appropriate. diff --git a/tags/w/wrong-bug-number-in-closes.tag b/tags/w/wrong-bug-number-in-closes.tag new file mode 100644 index 0000000..e3d5fbf --- /dev/null +++ b/tags/w/wrong-bug-number-in-closes.tag @@ -0,0 +1,5 @@ +Tag: wrong-bug-number-in-closes +Severity: warning +Check: debian/changelog +Explanation: Bug numbers can only contain digits. +See-Also: debian-policy 4.4 diff --git a/tags/w/wrong-compression-in-manual-page.tag b/tags/w/wrong-compression-in-manual-page.tag new file mode 100644 index 0000000..21e5a22 --- /dev/null +++ b/tags/w/wrong-compression-in-manual-page.tag @@ -0,0 +1,6 @@ +Tag: wrong-compression-in-manual-page +Severity: error +Check: documentation/manual +Renamed-From: manpage-not-compressed-with-gzip +Explanation: Manual pages should be compressed with gzip -9n. +See-Also: debian-policy 12.1 diff --git a/tags/w/wrong-file-owner-uid-or-gid.tag b/tags/w/wrong-file-owner-uid-or-gid.tag new file mode 100644 index 0000000..0a5a6da --- /dev/null +++ b/tags/w/wrong-file-owner-uid-or-gid.tag @@ -0,0 +1,14 @@ +Tag: wrong-file-owner-uid-or-gid +Severity: error +Check: files/ownership +Explanation: The user or group ID of the owner of the file is invalid. The + owner user and group IDs must be in the set of globally allocated + IDs, because other IDs are dynamically allocated and might be used + for varying purposes on different systems, or are reserved. The set + of the allowed, globally allocated IDs consists of the ranges 0-99, + 64000-64999 and 65534. + . + It's possible for a Policy-compliant package to trigger this tag if the + user is created in the preinst maintainer script, but this is a very rare + case and doesn't appear to be necessary. +See-Also: debian-policy 9.2 diff --git a/tags/w/wrong-manual-section.tag b/tags/w/wrong-manual-section.tag new file mode 100644 index 0000000..9817686 --- /dev/null +++ b/tags/w/wrong-manual-section.tag @@ -0,0 +1,8 @@ +Tag: wrong-manual-section +Severity: warning +Check: documentation/manual +Renamed-From: manpage-section-mismatch +Explanation: A manual page usually should contain a .TH header, specifying the + section. The section in this manual page doesn't match with the section in the + filename. +See-Also: groff_man(7), man(1) diff --git a/tags/w/wrong-name-for-changelog-of-native-package.tag b/tags/w/wrong-name-for-changelog-of-native-package.tag new file mode 100644 index 0000000..cd1fb0e --- /dev/null +++ b/tags/w/wrong-name-for-changelog-of-native-package.tag @@ -0,0 +1,7 @@ +Tag: wrong-name-for-changelog-of-native-package +Severity: warning +Check: debian/changelog +Explanation: The changelog file of a native Debian package (ie. if there is + no upstream source) should usually be installed as + /usr/share/doc/*pkg*/changelog.gz +See-Also: debian-policy 12.7 diff --git a/tags/w/wrong-name-for-debian-changelog-file.tag b/tags/w/wrong-name-for-debian-changelog-file.tag new file mode 100644 index 0000000..4d5cafc --- /dev/null +++ b/tags/w/wrong-name-for-debian-changelog-file.tag @@ -0,0 +1,6 @@ +Tag: wrong-name-for-debian-changelog-file +Severity: error +Check: debian/changelog +Explanation: The Debian changelog file should usually be installed as + /usr/share/doc/*pkg*/changelog.Debian.gz +See-Also: debian-policy 12.7 diff --git a/tags/w/wrong-name-for-debian-news-file.tag b/tags/w/wrong-name-for-debian-news-file.tag new file mode 100644 index 0000000..3c117cf --- /dev/null +++ b/tags/w/wrong-name-for-debian-news-file.tag @@ -0,0 +1,7 @@ +Tag: wrong-name-for-debian-news-file +Severity: warning +Check: debian/changelog +Explanation: The Debian news file must be installed as + /usr/share/doc/*pkg*/NEWS.Debian.gz with exactly that capitalization + or automated tools may not find it correctly. +See-Also: developer-reference 6.3.4 diff --git a/tags/w/wrong-name-for-manual-page.tag b/tags/w/wrong-name-for-manual-page.tag new file mode 100644 index 0000000..7f0688e --- /dev/null +++ b/tags/w/wrong-name-for-manual-page.tag @@ -0,0 +1,7 @@ +Tag: wrong-name-for-manual-page +Severity: error +Check: documentation/manual +Renamed-From: manpage-has-wrong-extension +Explanation: The manual page has an extension other than + "*section*[*program*].gz". +See-Also: debian-policy 12.1 diff --git a/tags/w/wrong-name-for-upstream-changelog.tag b/tags/w/wrong-name-for-upstream-changelog.tag new file mode 100644 index 0000000..4f8fd94 --- /dev/null +++ b/tags/w/wrong-name-for-upstream-changelog.tag @@ -0,0 +1,6 @@ +Tag: wrong-name-for-upstream-changelog +Severity: warning +Check: debian/changelog +Explanation: If there is an upstream changelog file, it should usually be + installed as /usr/share/doc/*pkg*/changelog.gz +See-Also: debian-policy 12.7 diff --git a/tags/w/wrong-path-for-interpreter.tag b/tags/w/wrong-path-for-interpreter.tag new file mode 100644 index 0000000..4e0ec4c --- /dev/null +++ b/tags/w/wrong-path-for-interpreter.tag @@ -0,0 +1,10 @@ +Tag: wrong-path-for-interpreter +Severity: error +Check: scripts +Explanation: The interpreter you used is installed at another location on Debian + systems. + . + Note that, as a particular exception, Debian Policy ยง 10.4 states that + Perl scripts should use /usr/bin/perl directly and not + /usr/bin/env, etc. +See-Also: debian-policy 10.4 diff --git a/tags/w/wrong-section-according-to-package-name.tag b/tags/w/wrong-section-according-to-package-name.tag new file mode 100644 index 0000000..8dca357 --- /dev/null +++ b/tags/w/wrong-section-according-to-package-name.tag @@ -0,0 +1,5 @@ +Tag: wrong-section-according-to-package-name +Severity: info +Check: fields/section +Explanation: This package has a name suggesting that it belongs to a section + other than the one it is currently categorized in. diff --git a/tags/w/wrong-section-for-udeb.tag b/tags/w/wrong-section-for-udeb.tag new file mode 100644 index 0000000..2666653 --- /dev/null +++ b/tags/w/wrong-section-for-udeb.tag @@ -0,0 +1,4 @@ +Tag: wrong-section-for-udeb +Severity: warning +Check: fields/section +Explanation: udeb packages should have "Section: debian-installer". diff --git a/tags/w/wrong-team.tag b/tags/w/wrong-team.tag new file mode 100644 index 0000000..48a3ba5 --- /dev/null +++ b/tags/w/wrong-team.tag @@ -0,0 +1,8 @@ +Tag: wrong-team +Severity: warning +Check: fields/maintainer/team +Explanation: The package is team-maintained but uses a name from + another team's name space. + . + Sometimes teams split up. This tag was designed to make sure the + maintainer address is updated when that happens. -- cgit v1.2.3