[DRE-maint] Bug#814645: ruby-mousetrap-rails: unhandled symlink to directory conversion: /usr/share/ruby-mousetrap-rails/vendor/assets/javascripts/mousetrap

[Andreas Beckmann]

Package: ruby-mousetrap-rails
Version: 1.4.6-4
Severity: serious
User: debian-qa at lists.debian.org
Usertags: piuparts

Hi,

an upgrade test with piuparts revealed that your package installs files
over existing symlinks and possibly overwrites files owned by other
packages. This usually means an old version of the package shipped a
symlink but that was later replaced by a real (and non-empty)
directory. This kind of overwriting another package's files cannot be
detected by dpkg.

This was observed on the following upgrade paths:

  testing -> sid

For /usr/share/doc/PACKAGE this may not be problematic as long as both
packages are installed, ship byte-for-byte identical files and are
upgraded in lockstep. But once one of the involved packages gets
removed, the other one will lose its documentation files, too,
including the copyright file, which is a violation of Policy 12.5:
https://www.debian.org/doc/debian-policy/ch-docs.html#s-copyrightfile

For other overwritten locations anything interesting may happen.

Note that dpkg intentionally does not replace directories with symlinks
and vice versa, you need the maintainer scripts to do this.
See in particular the end of point 4 in
https://www.debian.org/doc/debian-policy/ch-maintainerscripts.html#s-unpackphase

It is recommended to use the dpkg-maintscript-helper commands
'dir_to_symlink' and 'symlink_to_dir' (available since dpkg 1.17.14)
to perform the conversion, ideally using d/$PACKAGE.maintscript.
Do not forget to add 'Pre-Depends: ${misc:Pre-Depends}' in d/control.
See dpkg-maintscript-helper(1) and dh_installdeb(1) for details.


>From the attached log (usually somewhere in the middle...):

1m39.7s INFO: dirname part contains a symlink:
  /usr/share/ruby-mousetrap-rails/vendor/assets/javascripts/mousetrap/dictionary.js (ruby-mousetrap-rails) != /usr/share/javascript/mousetrap/dictionary.js (?)
    /usr/share/ruby-mousetrap-rails/vendor/assets/javascripts/mousetrap -> ../../../../javascript/mousetrap
  /usr/share/ruby-mousetrap-rails/vendor/assets/javascripts/mousetrap/global.js (ruby-mousetrap-rails) != /usr/share/javascript/mousetrap/global.js (?)
    /usr/share/ruby-mousetrap-rails/vendor/assets/javascripts/mousetrap -> ../../../../javascript/mousetrap
  /usr/share/ruby-mousetrap-rails/vendor/assets/javascripts/mousetrap/pause.js (ruby-mousetrap-rails) != /usr/share/javascript/mousetrap/pause.js (?)
    /usr/share/ruby-mousetrap-rails/vendor/assets/javascripts/mousetrap -> ../../../../javascript/mousetrap
  /usr/share/ruby-mousetrap-rails/vendor/assets/javascripts/mousetrap/plugins.js (ruby-mousetrap-rails) != /usr/share/javascript/mousetrap/plugins.js (?)
    /usr/share/ruby-mousetrap-rails/vendor/assets/javascripts/mousetrap -> ../../../../javascript/mousetrap
  /usr/share/ruby-mousetrap-rails/vendor/assets/javascripts/mousetrap/record.js (ruby-mousetrap-rails) != /usr/share/javascript/mousetrap/record.js (?)
    /usr/share/ruby-mousetrap-rails/vendor/assets/javascripts/mousetrap -> ../../../../javascript/mousetrap



cheers,

Andreas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ruby-mousetrap-rails_1.4.6-4.log.gz
Type: application/gzip
Size: 17160 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-ruby-extras-maintainers/attachments/20160213/1b83cdb9/attachment-0001.bin>