[Pkg-utopia-maintainers] Bug#884302: Bug#884302: avahi-ui-utils: recommends virtual package (non-deterministic, potentially pulling in non-free package)

[Michael Biebl]

Control: severity -1 normal

Am 13.12.2017 um 16:02 schrieb Jonas Smedegaard:
> Package: avahi-ui-utils
> Version: 0.7-3
> Severity: serious
> Justification: Policy 2.2.1
> 
> avahi-ui-utils recommends vnc-viewer.
> 
> vnc-viewer is a virtual package, which means it is not deterministic
> which package will satisfy the recommendation.
> 
> Moreover, vnc-viewer is provided by nonfree packages tightvnc-java and
> vnc-java, which means those of our users enabling the _ability_ to
> install nonfree packages (by including the nonfree suite) may
> accidentally install nonfree packages they did not explicitly choose.
> 
> Debian Policy includes the following requirement in §2.2.1:
> 
>> must not require or recommend a package outside of main for
>> compilation or execution (thus, the package must not declare a
>> Pre-Depends, Depends, Recommends, Build-Depends, Build-Depends-Indep,
>> or Build-Depends-Arch relationship on a non-main package unless that
>> package is only listed as a non-default alternative for a package in
>> main),
> 
> Listing a virtual package as first choice of a Recommends violates
> Policy §2.2.1, because that is not "a non-default alternative".

I don't read the policy this way, as this specific case is not covered.
Please get clarification from the policy maintainers before raising the
severity.

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20171213/6e289026/attachment.sig>