[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1106801: integrit: statically linked against glibc without a Built-Using: field



Package: integrit
Version: 4.1-3
Severity: serious
Justification: Policy 7.8

Dear maintainer,

The integrit packages provides the following files, which are statically
linked against glibc:
/usr/sbin/integrit
/usr/sbin/i-viewdb
/usr/bin/i-ls

glibc is mostly is mostly licensed under the LGPL, which requires that
the full source code of the incorporating binary package be made
available. According to Debian Policy §7.8 [1] such a binary package
MUST list the glibc source package (and possibly others) in the
Built-Using: field.

Regards
Aurelien

[1] https://www.debian.org/doc/debian-policy/ch-relationships.html#additional-source-packages-used-to-build-the-binary-built-using

Reply to: