X-Git-Url: https://git.saurik.com/apt.git/blobdiff_plain/bb6dd359654f4debd9816cc27fd893a437eb66cd..9a61bb2176e6599094c575dec7184c3afd6f39bd:/debian/apt.postinst diff --git a/debian/apt.postinst b/debian/apt.postinst old mode 100644 new mode 100755 index df0433057..deb422aa5 --- a/debian/apt.postinst +++ b/debian/apt.postinst @@ -15,11 +15,43 @@ set -e case "$1" in configure) + if dpkg --compare-versions "$2" lt 1.1~exp4; then + # apt-key before 0.9.10 could leave empty keyrings around + find /etc/apt/trusted.gpg.d/ -name '*.gpg' | while read keyring; do + if ! test -s "$keyring"; then + rm -f "$keyring" + fi + done + fi - if ! test -f /etc/apt/trusted.gpg; then - cp /usr/share/apt/ubuntu-archive.gpg /etc/apt/trusted.gpg + if dpkg --compare-versions "$2" lt-nl 0.9.9.5; then + # we are using tmpfiles for both + rm -f /etc/apt/trustdb.gpg + # this removal was done unconditional since 0.8.15.3 + SECRING='/etc/apt/secring.gpg' + # test if secring is an empty normal file + if test -f $SECRING -a ! -s $SECRING; then + rm -f $SECRING + fi + fi + + # add unprivileged user for the apt methods + adduser --force-badname --system -home /var/empty \ + --no-create-home --quiet _apt || true + chown -R _apt:root \ + /var/lib/apt/lists \ + /var/cache/apt/archives + + # ensure tighter permissons on the logs, see LP: #975199 + if dpkg --compare-versions "$2" lt-nl 0.9.7.7; then + # ensure permissions are right + chmod -f 0640 /var/log/apt/term.log* || true fi + # create kernel autoremoval blacklist on update + if dpkg --compare-versions "$2" lt 0.9.9.3; then + /etc/kernel/postinst.d/apt-auto-removal + fi ;; abort-upgrade|abort-remove|abort-deconfigure)