[Pkg-privacy-maintainers] Bug#880683: Should not start system-wide tor server

[Joachim Breitner]

Package: ricochet-im
Version: 1.1.4-2
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

thanks for packaging ricochet-im. As far as I can tell, it depends on
`tor` because it starts, as the user and on-demand, a tor process. But
installing the `tor` package will start a system-wide tor process, which
is probably not the intention of someone installing ricochet.

A solution might be to provide a `tor-bin` package that both `tor` and
`ricochet-bin` can depend upon, and `tor` ships the system-wide settings
(systemd file etc.).

Thanks,
Joachim


- -- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8), LANGUAGE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages ricochet-im depends on:
ii  libc6                        2.24-17
ii  libgcc1                      1:7.2.0-11
ii  libgl1                       0.2.999+git20170802-5
ii  libprotobuf10                3.0.0-9.1
ii  libqt5core5a                 5.9.1+dfsg-12
ii  libqt5gui5                   5.9.1+dfsg-12
ii  libqt5multimedia5            5.9.1-3
ii  libqt5network5               5.9.1+dfsg-12
ii  libqt5qml5                   5.9.1-6
ii  libqt5quick5                 5.9.1-6
ii  libqt5widgets5               5.9.1+dfsg-12
ii  libssl1.1                    1.1.0f-5
ii  libstdc++6                   7.2.0-11
ii  libubsan0                    7.2.0-11
ii  qml-module-qtmultimedia      5.9.1-3
ii  qml-module-qtquick-controls  5.9.1-2
ii  qml-module-qtquick-dialogs   5.9.1-2
ii  tor                          0.3.1.7-1

ricochet-im recommends no packages.

ricochet-im suggests no packages.

- -- no debconf information

-----BEGIN PGP SIGNATURE-----

iHEEARECADEWIQQxTjstYFpus1p9gRn2KOuTR0MgbAUCWfyy5hMcbm9tZWF0YUBk
ZWJpYW4ub3JnAAoJEPYo65NHQyBsWBMAmwUgk0DmXQhWbOD2so5eT4j4NfQHAJwM
v1Sh2LAvRbqthqv2Gonpkn8XaQ==
=mMNV
-----END PGP SIGNATURE-----