[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#887210: rkhunter should depend on e2fsprogs explicitly



Package: rkhunter
Version: 1.4.4-3
User: helmutg at debian.org
Usertags: nonessentiale2fsprogs

Dear maintainer,

We want to make removing e2fsprogs from installations possible. For standard
installations this is not useful, but embedded applications and chroots benefit
from such an option.  For getting there all packages that use e2fsprogs must be
identified and gain a dependency on it as e2fsprogs currently is essential.

rkhunter was identified as potentially needing such a dependency,
because it mentions tool names from e2fsprogs in the following files:

/usr/bin/rkhunter contains chattr and lsattr. According to file it is a POSIX shell script, ASCII text executable, with very long lines, with escape sequences
/var/lib/rkhunter/db/i18n/cn contains lsattr. According to file it is a UTF-8 Unicode text
/var/lib/rkhunter/db/i18n/de contains lsattr. According to file it is a UTF-8 Unicode text
/var/lib/rkhunter/db/i18n/en contains lsattr. According to file it is a ASCII text
/var/lib/rkhunter/db/i18n/ja contains lsattr. According to file it is a UTF-8 Unicode text
/var/lib/rkhunter/db/i18n/tr contains lsattr. According to file it is a ISO-8859 text
/var/lib/rkhunter/db/i18n/tr.utf8 contains lsattr. According to file it is a UTF-8 Unicode text
/var/lib/rkhunter/db/i18n/zh contains lsattr. According to file it is a ISO-8859 text
/var/lib/rkhunter/db/i18n/zh.utf8 contains lsattr. According to file it is a UTF-8 Unicode text

Please investigate whether these cases are actually uses of a tool from
e2fsprogs. Care has been taken to shrink the number of candidates as much as
possible, but a few false positives will remain. After doing so, do one of the
following:

 * Add e2fsprogs to Depends.
 * Add e2fsprogs to Recommends.
 * Close this bug explaining why e2fsprogs is not used by this package.

Once e2fsprogs drops the "Essential: yes" flag, this bug will be upgraded to RC
severity. Please note that lintian will warn about such a dependency before
lintian 2.5.56.

Thanks for your help

Helmut



Reply to: