Bug#704180: Use p11-kit to replace nssckbi

[Laurent Bigonville]

Le 11/01/19 à 17:17, Daniel Kahn Gillmor a écrit :
> On Thu 2019-01-10 21:48:22 +0000, David Woodhouse wrote:
>> On Thu, 2019-01-10 at 15:53 -0500, Daniel Kahn Gillmor wrote:
>>> what's the advantage of using alternatives instead of a package-
>>> specific displacement?
>> None really, as long as you put it in a separate p11-kit-trust  package
>> as Fedora/RHEL do.
>>
>> You don't want installation of the p11-kit package itself to trigger
>> the replacement, necessarily. Lots of other things use p11-kit.
> yes, agreed, it would be a separate and distinct binary package, not
> p11-kit on its own.
The problem is what/who will decide if this package is installed? If 
that package is being pulled by on other package for some reason, that 
means that the local administrator will not be able to revert the 
decision of the package maintainer who has added this dependency