[Debian-ha-maintainers] Bug#711352: ships default config which enables automatic survey participation

Thijs Kinkhorst thijs at debian.org
Thu Jun 6 13:38:12 UTC 2013


Package: drbd8-utils
Version: 8.3.13-2
Severity: serious

Hi,

drdb has a usage survey in which the software connects to a remote server.
Participation in this survey is controlled via the 'usage-count' option:

  # Participate in DRBD's online usage counter at http://usage.drbd.org
  # possilbe options: ask, yes, no. Default is ask. In case you do not
  # know, set it to ask, and follow the on screen instructions later.

The default 'ask' seems to be a good compromise between user privacy
and the gathering of statistics. However, the Debian package ships with
a default config file which contains:

  usage-count yes;

which means that information about the installed system is already
sent (leaked if you wish) before the user even got to choose whether
they want this.

This really should not be set to yes by default in Debian; 'ask',
the default, seems most appropriate.


Cheers,
Thijs



More information about the Debian-ha-maintainers mailing list