[Pkg-sssd-devel] Bug#748671: libnss-sss: Multiarch package removes configuration without reference counting

[Josselin Mouette]

Package: libnss-sss
Version: 1.11.5.1-1
Severity: serious

Hi,

libnss-sss has the following code in postrm:

    sed -i --regexp-extended '
      /^(passwd|group|shadow|netgroup):/ {
        s/\bsss\b//g
        s/[[:space:]]+$//
      }
    ' /etc/nsswitch.conf

This code is executed on removal or purge, unconditionnally.

However, this is a multiarch package, which means it can be removed or 
purged while still being installed in another architecture.

Therefore, the following process:
 install libnss-sss:amd64
 install libnss-sss:i386
 remove libnss-sss:i386
leaves an unusable libnss-sss:amd64 installed on the system.

The DPKG_MAINTSCRIPT_PACKAGE_REFCOUNT variable (since dpkg 1.17.2) 
should help deal with such a situation.

Thanks,
-- 
Joss