postinst is in opendnssec-common 1:2.1.3-0.2build1.
This file is a maintainer script. It is executed when installing (*inst) or removing (*rm) the package.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60  | #!/bin/sh
# postinst script for opendnssec-common
set -e
set_perms() {
    if ! dpkg-statoverride --list "$4" >/dev/null; then
        dpkg-statoverride --quiet --update --add "$@"
    fi
}
unset_perms() {
    dpkg-statoverride --quiet --remove "$1" || true
}
case "$1" in
    configure)
	if dpkg --compare-versions "$2" le "1.3.6-1"; then
	    for conf in zonefetch.xml; do
		unset_perms /etc/opendnssec/$conf
                # and finally clear it out from the ucf database
		[ -f /etc/opendnssec/$conf.dpkg-del ] && \
		    rm -f /etc/opendnssec/$conf.dpkg-del
		ucf --purge /etc/opendnssec/$conf
		ucfr --purge opendnssec /etc/opendnssec/$conf
	    done
	fi
	if ! getent passwd opendnssec > /dev/null; then
            adduser --quiet --system --group --no-create-home --home /var/lib/opendnssec opendnssec
	fi
	set_perms root opendnssec 0750 /etc/opendnssec
	set_perms root opendnssec 0750 /var/lib/opendnssec
	for dir in tmp signconf unsigned signed db signer enforcer; do
	    set_perms opendnssec opendnssec 0755 /var/lib/opendnssec/$dir
	done
	for conf in addns.xml conf.xml kasp.xml zonelist.xml; do
	    ucf /usr/share/opendnssec/$conf /etc/opendnssec/$conf
	    ucfr opendnssec /etc/opendnssec/$conf
	    set_perms root opendnssec 0640 /etc/opendnssec/$conf
	done
    ;;
    abort-upgrade|abort-remove|abort-deconfigure)
    ;;
    *)
        echo "postinst called with unknown argument \`$1'" >&2
        exit 1
    ;;
esac
exit 0
 |