Bug#578578: sun-java6: crypto policy configuration files violate Debian policy

[moog]

Torsten Werner wrote:
> thanks for your bug report and the patch but is it is way more
> important to get the current version of sun-java6 into testing. We
> will fix the bug later.

Thanks very much, that will be great.


Sylvestre Ledru wrote:
> I am not sure to understand how archives can be considered as configuration files ?!

I'm going by the definition in section 10.7.1 of the Debian Policy Manual.
Those two files specify the policy for cryptographic strength and are
intended to be replaceable by sysadmins who wish to alter this policy
from the restrictive default, so they meet the definition.


> By the way, could you explain what you set the severity to serious ? It
> does not seem a big issue here to me.

reportbug advised me to rate the bug as "serious" if "the problem is a
violation of a 'must' or 'required' directive" of Debian policy.  Section
10.7.2 of the policy manual says that any configuration files "must reside
in /etc", so this problem violates that rule.

Thanks for your consideration.