X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=policy.sgml;h=c5fd30586c505a1805f90e2d9b833ae2cf4a1c2e;hb=35b766c956f252a9092cfb7b04bcf1f05a4627d1;hp=27082429c81303e3bdc0c51c2ac2c38e2892eff1;hpb=c3b208f5570c071ee42b91586ce3d6664256e6f5;p=debian%2Fdebian-policy.git
diff --git a/policy.sgml b/policy.sgml
index 2708242..c5fd305 100644
--- a/policy.sgml
+++ b/policy.sgml
@@ -2367,8 +2367,7 @@ endif
This is an optional, recommended configuration file for the
uscan utility which defines how to automatically scan
ftp or http sites for newly available updates of the
- package. This is used
- by
@@ -6918,6 +6917,20 @@ Built-Using: grub2 (= 1.99-9), loadlin (= 1.6e-1)
exceptions to the FHS apply:
+ The FHS requirement that architecture-independent
+ application-specific static files be located in
+
The optional rules related to user specific
@@ -6963,6 +6976,17 @@ Built-Using: grub2 (= 1.99-9), loadlin (= 1.6e-1)
multiarch.
+ The requirement for C and C++ headers files to be
+ accessible through the search path
+
Applications may also use a single subdirectory under
- The following directories in the root filesystem are
- additionally allowed:
+ The
+ The requirement for
On GNU/Hurd systems, the following additional
@@ -8433,7 +8466,17 @@ fi
renamed. If a consensus cannot be reached, both
programs must be renamed.
+ Binary executables must not be statically linked with the GNU C
+ library, since this prevents the binary from benefiting from
+ fixes and improvements to the C library without being rebuilt
+ and complicates security updates. This requirement may be
+ relaxed for binary executables whose intended purpose is to
+ diagnose and fix the system in situations where the GNU C
+ library may not be usable (such as system recovery shells or
+ utilities like ldconfig) or for binary executables where the
+ security benefits of static linking outweigh the drawbacks.
+
By default, when a package is being built, any binaries
created should include debugging information, as well as
@@ -9010,8 +9053,10 @@ ln -fs ../sbin/sendmail debian/tmp/usr/bin/runq
package is purged.
@@ -9697,15 +9742,16 @@ done
Cgi-bin executable files are installed in the
directory