[Pkg-swan-devel] Bug#740808: strongswan-starter and openswan: error when trying to install together

[Ralf Treinen]

Package: openswan,strongswan-starter
Version: openswan/1:2.6.38-1
Version: strongswan-starter/5.1.1-3
Severity: serious
User: treinen at debian.org
Usertags: edos-file-overwrite

Date: 2014-03-05
Architecture: amd64
Distribution: sid

Hi,

automatic installation tests of packages that share a file and at the
same time do not conflict by their package dependency relationships has
detected the following problem:


Preconfiguring packages ...
Selecting previously unselected package libdb5.3:amd64.
(Reading database ... 10947 files and directories currently installed.)
Preparing to unpack .../libdb5.3_5.3.28-3_amd64.deb ...
Unpacking libdb5.3:amd64 (5.3.28-3) ...
Selecting previously unselected package libkeyutils1:amd64.
Preparing to unpack .../libkeyutils1_1.5.6-1_amd64.deb ...
Unpacking libkeyutils1:amd64 (1.5.6-1) ...
Selecting previously unselected package libkrb5support0:amd64.
Preparing to unpack .../libkrb5support0_1.12+dfsg-2_amd64.deb ...
Unpacking libkrb5support0:amd64 (1.12+dfsg-2) ...
Selecting previously unselected package libk5crypto3:amd64.
Preparing to unpack .../libk5crypto3_1.12+dfsg-2_amd64.deb ...
Unpacking libk5crypto3:amd64 (1.12+dfsg-2) ...
Selecting previously unselected package libkrb5-3:amd64.
Preparing to unpack .../libkrb5-3_1.12+dfsg-2_amd64.deb ...
Unpacking libkrb5-3:amd64 (1.12+dfsg-2) ...
Selecting previously unselected package libgssapi-krb5-2:amd64.
Preparing to unpack .../libgssapi-krb5-2_1.12+dfsg-2_amd64.deb ...
Unpacking libgssapi-krb5-2:amd64 (1.12+dfsg-2) ...
Selecting previously unselected package libsasl2-modules-db:amd64.
Preparing to unpack .../libsasl2-modules-db_2.1.26.dfsg1-9_amd64.deb ...
Unpacking libsasl2-modules-db:amd64 (2.1.26.dfsg1-9) ...
Selecting previously unselected package libsasl2-2:amd64.
Preparing to unpack .../libsasl2-2_2.1.26.dfsg1-9_amd64.deb ...
Unpacking libsasl2-2:amd64 (2.1.26.dfsg1-9) ...
Selecting previously unselected package libldap-2.4-2:amd64.
Preparing to unpack .../libldap-2.4-2_2.4.31-1+nmu2+b1_amd64.deb ...
Unpacking libldap-2.4-2:amd64 (2.4.31-1+nmu2+b1) ...
Selecting previously unselected package libxml2:amd64.
Preparing to unpack .../libxml2_2.9.1+dfsg1-3_amd64.deb ...
Unpacking libxml2:amd64 (2.9.1+dfsg1-3) ...
Selecting previously unselected package librtmp0:amd64.
Preparing to unpack .../librtmp0_2.4+20121230.gitdf6c518-1_amd64.deb ...
Unpacking librtmp0:amd64 (2.4+20121230.gitdf6c518-1) ...
Selecting previously unselected package libssh2-1:amd64.
Preparing to unpack .../libssh2-1_1.4.3-2_amd64.deb ...
Unpacking libssh2-1:amd64 (1.4.3-2) ...
Selecting previously unselected package libcurl3:amd64.
Preparing to unpack .../libcurl3_7.35.0-1_amd64.deb ...
Unpacking libcurl3:amd64 (7.35.0-1) ...
Selecting previously unselected package libgeoip1:amd64.
Preparing to unpack .../libgeoip1_1.6.0-1_amd64.deb ...
Unpacking libgeoip1:amd64 (1.6.0-1) ...
Selecting previously unselected package libgmp10:amd64.
Preparing to unpack .../libgmp10_2%3a5.1.3+dfsg-1_amd64.deb ...
Unpacking libgmp10:amd64 (2:5.1.3+dfsg-1) ...
Selecting previously unselected package openssl.
Preparing to unpack .../openssl_1.0.1f-1_amd64.deb ...
Unpacking openssl (1.0.1f-1) ...
Selecting previously unselected package libisc95.
Preparing to unpack .../libisc95_1%3a9.9.5.dfsg-2_amd64.deb ...
Unpacking libisc95 (1:9.9.5.dfsg-2) ...
Selecting previously unselected package libdns100.
Preparing to unpack .../libdns100_1%3a9.9.5.dfsg-2_amd64.deb ...
Unpacking libdns100 (1:9.9.5.dfsg-2) ...
Selecting previously unselected package libisccc90.
Preparing to unpack .../libisccc90_1%3a9.9.5.dfsg-2_amd64.deb ...
Unpacking libisccc90 (1:9.9.5.dfsg-2) ...
Selecting previously unselected package libisccfg90.
Preparing to unpack .../libisccfg90_1%3a9.9.5.dfsg-2_amd64.deb ...
Unpacking libisccfg90 (1:9.9.5.dfsg-2) ...
Selecting previously unselected package libbind9-90.
Preparing to unpack .../libbind9-90_1%3a9.9.5.dfsg-2_amd64.deb ...
Unpacking libbind9-90 (1:9.9.5.dfsg-2) ...
Selecting previously unselected package liblwres90.
Preparing to unpack .../liblwres90_1%3a9.9.5.dfsg-2_amd64.deb ...
Unpacking liblwres90 (1:9.9.5.dfsg-2) ...
Selecting previously unselected package bind9-host.
Preparing to unpack .../bind9-host_1%3a9.9.5.dfsg-2_amd64.deb ...
Unpacking bind9-host (1:9.9.5.dfsg-2) ...
Selecting previously unselected package host.
Preparing to unpack .../host_1%3a9.9.5.dfsg-2_all.deb ...
Unpacking host (1:9.9.5.dfsg-2) ...
Selecting previously unselected package openswan.
Preparing to unpack .../openswan_1%3a2.6.38-1_amd64.deb ...
Unpacking openswan (1:2.6.38-1) ...
Selecting previously unselected package libstrongswan.
Preparing to unpack .../libstrongswan_5.1.1-3_amd64.deb ...
Unpacking libstrongswan (5.1.1-3) ...
Selecting previously unselected package strongswan-starter.
Preparing to unpack .../strongswan-starter_5.1.1-3_amd64.deb ...
Unpacking strongswan-starter (5.1.1-3) ...
dpkg: error processing archive /var/cache/apt/archives/strongswan-starter_5.1.1-3_amd64.deb (--unpack):
 trying to overwrite '/etc/ipsec.secrets', which is also in package openswan 1:2.6.38-1
dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)
Processing triggers for man-db (2.6.6-1) ...
Errors were encountered while processing:
 /var/cache/apt/archives/strongswan-starter_5.1.1-3_amd64.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)


This is a serious bug as it makes installation fail, and violates
sections 7.6.1 and 10.1 of the policy. An optimal solution would
consist in only one of the packages installing that file, and renaming
or removing the file in the other package. Depending on the
circumstances you might also consider Replace relations or file
diversions. If the conflicting situation cannot be resolved then, as a
last resort, the two packages have to declare a mutual
Conflict. Please take into account that Replaces, Conflicts and
diversions should only be used when packages provide different
implementations for the same functionality.

Here is a list of files that are known to be shared by both packages
(according to the Contents file for sid/amd64, which may be
slightly out of sync):

  /etc/init.d/ipsec
  /etc/ipsec.conf
  /etc/ipsec.secrets
  /usr/lib/ipsec/_copyright
  /usr/lib/ipsec/_updown
  /usr/sbin/ipsec
  /usr/share/man/man5/ipsec.conf.5.gz
  /usr/share/man/man5/ipsec.secrets.5.gz
  /usr/share/man/man8/ipsec.8.gz

This bug has been filed against both packages. If you, the maintainers of
the two packages in question, have agreed on which of the packages will
resolve the problem please reassign the bug to that package. You may then
also register in the BTS that the other package is affected by the bug.

-Ralf.

PS: for more information about the detection of file overwrite errors
of this kind see http://edos.debian.net/file-overwrites/.