https://bugzilla.novell.com/show_bug.cgi?id=684762 https://bugzilla.novell.com/show_bug.cgi?id=684762#c0 Summary: Update of kdelibs4 overwrites /usr/share/kde4/apps/kssl/ca-bundle.crt Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: x86-64 OS/Version: openSUSE 11.3 Status: NEW Severity: Normal Priority: P5 - None Component: KDE4 Workspace AssignedTo: kde-maintainers@suse.de ReportedBy: rolf@rotkraut.de QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.16) Gecko/20110319 SUSE/3.6.16-0.2.1 Firefox/3.6.16 The file /usr/share/kde4/apps/kssl/ca-bundle.crt contains all the root certificates that should be trusted by KDE applications such as kmail. Sites using their own SSL certificates or admins having their own preferences on which certificates they want to trust need to edit this file to add or remove root certificates. Therefore this file definitely contains local site configuration. Unfortunately, the spec file for kdelibs4 fails to mark this file as %config and so it gets overwritten each time a new version of kdelibs4 gets installed. Strictly speaking, since this file may contain site configuration, /usr/share/kde4 is the wrong location to install it in the first place. It should rather be installed in /etc, for instance as /etc/kde4/share/apps/kssl/ca-bundle.crt. Reproducible: Always Steps to Reproduce: 1. Edit /usr/share/kde4/apps/kssl/ca-bundle.crt to add custom root certificates. 2. Upgrade kdelibs4, for instance installing some security patch. Actual Results: /usr/share/kde4/apps/kssl/ca-bundle.crt gets replaced by the version in the new rpm package. The local site configuration is lost. Expected Results: The file from the upgrade package should be installed as ca-bundle.crt.rpmnew rather then overwriting the existing file. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.