X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=policy.sgml;h=a8afd4188e635c9ffe98ca863f0c6b4121302a40;hb=d6fe14c1c08cea5adecd5006da900e12511beff5;hp=7bb703bef00b6767fe6eb064b7113c4b03f509b5;hpb=6271e034249125d29a5612d864a26f8bde1538ad;p=debian%2Fdebian-policy.git

diff --git a/policy.sgml b/policy.sgml
index 7bb703b..a8afd41 100644
--- a/policy.sgml
+++ b/policy.sgml
@@ -1931,6 +1931,10 @@ zope.
 	  any target that these targets depend on must also be
 	  non-interactive.
 	</p>
+	<p>
+          For packages in the main archive, no required targets
+          may attempt network access.
+	</p>
 
 	<p>
 	  The targets are as follows:
@@ -2558,7 +2562,9 @@ Package: libc6
 	  the field name is <tt>Package</tt> and the field value
 	  <tt>libc6</tt>.
 	</p>
-
+        <p> Empty field values are only permitted in source package control files
+	  (<file>debian/control</file>). Such fields are ignored.
+        </p>
 	<p>
 	  A paragraph must not contain more than one instance of a
 	  particular field name.
@@ -2701,6 +2707,7 @@ Package: libc6
 	  file. These tools are responsible for removing the line
 	  breaks from such fields when using fields from
 	  <file>debian/control</file> to generate other control files.
+	  They are also responsible for discarding empty fields.
 	</p>
 
 	<p>
@@ -7349,6 +7356,35 @@ rmdir /usr/local/share/emacs 2>/dev/null || true
 	      </item>
 
 	      <tag>65535:</tag>
+	      <item>
+		<p>
+		  This value <em>must not</em> be used, because it was
+		  the error return sentinel value when <tt>uid_t</tt>
+		  was 16 bits.
+		</p>
+	      </item>
+
+	      <tag>65536-4294967293:</tag>
+	      <item>
+		<p>
+		  Dynamically allocated user accounts.  By
+		  default <prgn>adduser</prgn> will not allocate UIDs
+		  and GIDs in this range, to ease compatibility with
+		  legacy systems where <tt>uid_t</tt> is still 16
+		  bits.
+	        </p>
+	      </item>
+
+	      <tag>4294967294:</tag>
+	      <item>
+		<p>
+                  <tt>(uid_t)(-2) == (gid_t)(-2)</tt> <em>must not</em> be
+                  used, because it is used as the anonymous, unauthenticated
+                  user by some NFS implementations.
+		</p>
+	      </item>
+
+	      <tag>4294967295:</tag>
 	      <item>
 		<p>
 		  <tt>(uid_t)(-1) == (gid_t)(-1)</tt> <em>must
@@ -8891,6 +8927,7 @@ fname () {
 	    would point to <file>/srv/run</file> rather than the intended
 	    target.
 	  </footnote>
+	  Symbolic links must not traverse above the root directory.
 	</p>
 
 	<p>