Bug#814446: tomcat8: wants to overwrite admin configuration on upgrade

[Thorsten Glaser]

Package: tomcat8
Version: 8.0.32-1
Severity: serious
Justification: Policy 10.7.3 (MUST), 3.9.1 (SHOULD)

On upgrade, I got asked by ucf to replace my config:

       │ --- /etc/default/tomcat8 2016-01-12 17:11:53.730570427 +0100
       │ +++ /tmp/tomcat8.rNFl7ipDcy 2016-02-11 17:24:28.959519437 +0100
       │ @@ -18,7 +18,7 @@
       │  # response time). If you use that option and you run Tomcat on a machine with
       │  # exactly one CPU chip that contains one or two cores, you should also add
       │  # the "-XX:+CMSIncrementalMode" option.
       │ -JAVA_OPTS="-Djava.awt.headless=true -Xmx2048m -XX:+UseConcMarkSweepGC"
       │ +JAVA_OPTS="-Djava.awt.headless=true -Xmx2048m -XX:+UseConcMarkSweepGC -Dfile.encoding=UTF-8
       │ -Djava.security.egd=file:/dev/./urandom -XX:MaxPermSize=128m"
       │
       │  # To enable remote debugging uncomment the following line.
       │  # You will then be able to use a java debugger on port 8000.
       │ @@ -38,16 +38,9 @@
       │
       │  # Location of the JVM temporary directory
       │  # WARNING: This directory will be destroyed and recreated at every startup !
       │ -JVM_TMP=/tmp/tomcat8-temp
       │ +#JVM_TMP=/tmp/tomcat8-temp
       │
       │  # If you run Tomcat on port numbers that are all higher than 1023, then you
       │  # do not need authbind. It is used for binding Tomcat to lower port numbers.
       │  # (yes/no, default: no)
       │  #AUTHBIND=no
       │ -
       │ -JAVA_OPTS="${JAVA_OPTS} -Dfile.encoding=UTF-8"
       │ -
       │ -export LC_ALL=C.UTF-8
       │ -
       │ -JAVA_OPTS="${JAVA_OPTS} -Djava.security.egd=file:/dev/./urandom"
       │ -JAVA_OPTS="${JAVA_OPTS} -XX:MaxPermSize=128m"

This is 100% changing my own settings (merging some options,
removing two others) and 0% package-provided configuration
changes, and as such violates Policy (cf. #812574).

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.3.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)

Versions of packages tomcat8 depends on:
ii  adduser                3.113+nmu3
ii  debconf [debconf-2.0]  1.5.58
ii  tomcat8-common         8.0.32-1
ii  ucf                    3.0033

Versions of packages tomcat8 recommends:
pn  authbind  <none>

Versions of packages tomcat8 suggests:
pn  libtcnative-1     <none>
pn  tomcat8-admin     <none>
pn  tomcat8-docs      <none>
pn  tomcat8-examples  <none>
pn  tomcat8-user      <none>

-- Configuration Files:
/etc/tomcat8/catalina.properties changed [not included]
/etc/tomcat8/context.xml changed [not included]
/etc/tomcat8/server.xml changed [not included]
/etc/tomcat8/tomcat-users.xml changed [not included]

-- debconf information:
  tomcat8/username: tomcat8
  tomcat8/javaopts: -Djava.awt.headless=true -Xmx2048m -XX:+UseConcMarkSweepGC -Dfile.encoding=UTF-8 -Djava.security.egd=file:/dev/./urandom -XX:MaxPermSize=128m
  tomcat8/groupname: tomcat8