[Bug 1206878] [NEW] Configuration should be purged only in nginx-common

Launchpad Bug Tracker 1206878 at bugs.launchpad.net
Tue Aug 6 17:39:21 UTC 2013


You have been subscribed to a public bug by Thomas Ward (teward):

[Impact]

 * When purging nginx-light, nginx-full, or nginx-naxsi with apt-get
remove --purge (or similar), the /etc/nginx/ folder and all
configurations are removed.

 * nginx-common should be the package that, when purged, will remove the
configuration data as well as the program.

 * Removal of a user's configuration when the -common package is not
removed is a severe issue, and when Thomas Ward consulted with Clint
Byrum on bug importance, this was determined to be a "Critical" bug as
user configuration removals should not be happening in this case.

[Test Case]

 * Produced by purging nginx-full, nginx-light, or nginx-naxsi.

 * By running a purge of nginx-full or nginx-light or nginx-naxsi
without removing nginx-common, the system should not be removing a
user's configuration files for nginx.  Only if nginx-common is removed
should the system

[Regression Potential]

 * Minimal - The patch from Debian has been in the NGINX packages since
1.2.1 and is also included in Quantal and later with no regressions.

[Other Info]
 
 * Patch to fix this issue (to be attached here shortly) originated from Debian.

 * Debdiffs to be attached after build-tests are completed.


------

Original Description:

nginx in ubuntu has a very violently bug when purging one of the packages
nginx-full, nginx-light or nginx-naxsi while moving from light to full or other
ways. The packages -light, -full and -naxsi will remove /etc/nginx,
/var/log/nginx and /var/lib/nginx completely leaving the system broken. The
directories are not owned by this respective packages at all then owned by
nginx-common. So after such a transition the whole nginx installation is broken
and one has to also first to purge nginx-common and reinstalling it.

Unneeded to say that all own site configurations has been deleted too.

This is a massive violation of debian policy. However, debian had never has
this bug in one of there stable distributions, so this bug only affects ubuntu
(12.04 LTS was checked by me)

** Affects: nginx (Ubuntu)
     Importance: Critical
         Status: Fix Released

** Affects: nginx (Ubuntu Precise)
     Importance: Critical
     Assignee: Thomas Ward (teward)
         Status: In Progress

** Affects: nginx (Debian)
     Importance: Unknown
         Status: Fix Released

-- 
Configuration should be purged only in nginx-common
https://bugs.launchpad.net/bugs/1206878
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.



More information about the Ubuntu-sponsors mailing list