[Pkg-utopia-maintainers] Bug#464712: avahi-daemon needs "Depends libcap2 (>= 2.10)" too

Sven Joachim svenjoac at gmx.de
Wed Jul 9 07:24:51 UTC 2008


On 2008-07-09 08:41 +0200, Ted Percival wrote:

> reopen 464712
> found avahi-daemon/0.6.23-2
> thanks
>
> The libcap2 dependency is more nuanced than I realised. In order to
> avoid a similar warning (warning: `avahi-daemon' uses deprecated v2
> capabilities in a way that may be insecure.") the libcap2 package must
> be >= 2.10 as well (not just libcap2-dev).
>
> I guess this versioned "Depends" should be added explicitly.
>
> For details see
> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blob;f=kernel/capability.c;h=901e0fdc3fffa3b32fca26e0aa4e1985b244bd10;hb=HEAD#l55
> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ca05a99a54db1db5bca72eccb5866d2a86f8517f
> https://bugzilla.redhat.com/show_bug.cgi?id=447518

Would it not be better to fix this in libcap2's shlibs file?  I.e. use

libcap 2 libcap2 (>= 2.10-1)

there and let avahi-daemon and other packages build-depend on
libcap2-dev (>= 2.10-3), assuming that 2.10-3 is the version containing
that shlibs file.

Sven






More information about the Pkg-utopia-maintainers mailing list