[pkg-wicd-maint] Bug#901592: wicd-daemon: please remove the vulnerable dhcpcd5 from the OR'ed dependencies

[Vincent Lefevre]

On 2018-06-15 12:37:31 +0200, Axel Beckert wrote:
> Vincent Lefevre wrote:
> > Due to bug 852343, wicd-daemon now depends on
> > 
> >   dhcpcd5 | isc-dhcp-client | pump | udhcpc
> 
> Hrm. That bug report never has been closed. Ah, no, you were wrong:
> It's not due to #852343 (which is indeed still open), but due to
> #783272.

OK. But, then, shouldn't bug #852343 have been merged with #783272?
It seems to be the same request.

> > The unnecessary dependency on dhcpcd5 should be removed.
> 
> I disagree: Neither should the dependency be removed no is it
> unnecessary.
> 
> In contrary: It would be a policy violation if I (just) remove that
> dependency because wicd _has_ a relation with dhcpcd5 and hence
> requires a package relation with it. And already alone because of that
> it is surely not RC.
> 
> The only thing I likely will change in wicd is to not keep dhcpcd5 as
> first of the alternative list of DHCP client dependencies, but move
> isc-dhcp-client to the first position.

Actually, shouldn't this dependency be a "Recommends" instead of
"Depends"? I meant that some users may want to use wicd only with
static network settings, thus wouldn't need a DHCP client.

FYI, ifupdown has a Recommends:

Recommends: isc-dhcp-client | dhcp-client

Ditto for network-manager (but with just isc-dhcp-client).

-- 
Vincent Lefèvre <vincent at vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)