Bug#925473: tomcat9: sysvinit script missing

[Markus Koschany]

Am Dienstag, dem 21.09.2021 um 16:10 +0000 schrieb Thorsten Glaser:
[...]
> I have no idea why Emmanuel, the primary maintainer, has been set
> so strongly against merging this patch for as long as I promise to
> take care of it and deal with any related fallout

>  (maybe some systemd
> fan paid him)

^^^ 
Such malicious allegations are not helpful.

>  but this is what is, and that GR outcome is interpreted
> as Emmanuel being able to block this indefinitely despite nōn-systemd
> continuing to be a supported way of running Debian (albeit not without
> UsrMove in bookworm/sid).

The GR outcome was systemd but we support exploring alternatives, not we
support systemd and sysvinit in any case. Systemd is far superior when it comes
to security features like sandboxing and limiting access to the file system.
This is not a theoretical problem. Tomcat has been affected by security
vulnerabilities like remote code execution and read and write access to
arbitrary files in the past. Just focusing on systemd makes it simpler for us
to support Tomcat for its whole life cycle which is at least five years. These
are the main reasons for not supporting sysvinit.



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20210921/1eac6948/attachment.sig>