[pkg-wpa-devel] Bug#622837: libpcsclite1: please drop Recommends: pcscd

Kel Modderman kel at otaku42.de
Fri Apr 15 10:55:53 UTC 2011


On Fri, 15 Apr 2011 06:40:32 PM Jonathan Nieder wrote:
> Ludovic Rousseau wrote:
> 
> > You think it is a bug.
> > I think it is not a bug.
> >
> > How do you propose to solve this "bug"?
> > What would be OK for you as a solution?
> 
> I don't want to argue much.  I do consider it a bug that installing
> wpasupplicant causes a setuid smartcard daemon to be installed.  I
> believe it is an unintended consequence.  It is not the best thing
> to happen behind the user's back.
> 
> That said:
> 
>  - I could easily be wrong;
>  - I am not claiming you made some bad decision before, just that
>    this is a problem for Debian to solve (that's what the BTS is
>    for, after all).
> 
> I would propose:
> 
>  - if users of the library will crash or otherwise fail if pcscd
>    is not installed, mentioning that in the package description;
> 
>  - otherwise, downgrading the Recommends to a Suggests and
>    notifying the maintainers of reverse-dependencies that they
>    should add Depends: pcscd.
> 
> No doubt there are plenty of alternative fixes possible.

1) Disable support for PCSC in wpasupplicant, and noone using Debian could
use this function without recompiling wpa_supplicant + friends. I do not
think any Debian supporter wats this.

or

2) Link against libpcsclite, and allow the end user to install daemon if
they need that (and given all the arguments, you must damn well know if you
need that). Given the "correct" dependency between libpcsclite + daemon this
is _easily_ possible.

3) Will NOT rehash the dlopen() debacle.

If pushed into a corner I will do 1. Prefer to do 2.

Kel.





More information about the Pkg-wpa-devel mailing list