Re: Bits from the Testing Security team
On Mon, Oct 15, 2007 at 04:17:35PM +0200, Nico Golde wrote:
> > > > I wonder if in those special cases an Embed: <source> tag could be added in
> > > > debian/control to help tracking things.
> > >
> > > That would be a nice thing, also if this would include
> > > information if the code is really included or just
> > > statically linked against it.
> >
> > Well, I would consider statically linking a non embedded (i.e. a packaged)
> > library a bug... Are there known cases where this is a required condition?
>
> Yes, dpkg for example links statically against libbz2 and zlib just to
> pick a famous example.
> Kind regards
> Nico
>
So two different fields would be useful, the static related one would
be probably better depending on the right -dev package instead of the source
package. Maybe something like
Embedded-Sources: <source-pkg>, ...
Static-Build-Depends: <dev-pkg>, ...
with usual version relationships.
--
Francesco P. Lovergine
Reply to: