Re: Bug#1142656: override: needrestart:admin/standard

--al57y76fdizs3dmy
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

Chris Hofst=C3=A4dtler <[email protected]> (2026-07-23):
> currently server systems installed with the default installation=20
> method tend to keep running programs affected by bugs (incl.=20
> security vulnerabilities): even when package upgrades are applied,=20
> users are unaware that they need to restart the affected services.
>=20
> Additionally it's hard to tell which services are affected, f.e.=20
> when the security fix is in a shared library.
>=20
> Please consider shipping needrestart by default - I thus propose=20
> overriding the priority to standard.

For (my part of) debian-boot@, no objections. I'm definitely not an
elephant but I don't recall the last time we actually added something
to standard, only stuff getting removed from it. I'm adding debian-cd@
for information (and maybe action) accordingly.

> I hope needrestart is also fine for desktop installations.

That looks like a good question, does it add anything to e.g. specific
package management/upgrade mechanisms, is that a no-op because they
already do their own thing, or could it interfere? (I have needrestart
on my Debian 12 =E2=80=94 oops, time flies =E2=80=94 laptop, I'm using GNOM=
E there,
but I'm using apt-get for everything sysadmin-related, so I really
have no idea at this point.)


Cheers,
--=20
Cyril Brulebois ([email protected])            <https://debamax.com/>
D-I release manager -- Release team member -- Freelance Consultant

--al57y76fdizs3dmy
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=gksO
-----END PGP SIGNATURE-----

--al57y76fdizs3dmy--