Bug#863118: devscripts needs proper configuration file parsing

Adrian Bunk bunk at debian.org
Mon May 22 08:14:59 UTC 2017


Package: devscripts
Version: 2.17.5
Severity: normal

devscripts.conf(5) says:

  The two configuration files are /etc/devscripts.conf for system-wide
  defaults and ~/.devscripts for per-user settings. They are written
  with bash(1) syntax, but should only have comments and simple variable
  assignments in them; they are both sourced (if present) by many of the
  devscripts scripts.


This is a hack, not a proper handling of the configuration.

As seen in #863101, "they are both sourced" implies that one
whitespace too many can have unexpected consequences.

The "but should only have" statement implies that users cannot
rely on being able todo anything other than variable assignment
in them.

It would be much more robust against user typos if the configuration
files would be properly parsed instead of blindly executed.



More information about the devscripts-devel mailing list