Package: integrit
Version: 4.1-3
Severity: serious
Justification: Policy 7.8

Dear maintainer,

The integrit packages provides the following files, which are statically
linked against glibc:
/usr/sbin/integrit
/usr/sbin/i-viewdb
/usr/bin/i-ls

glibc is mostly is mostly licensed under the LGPL, which requires that
the full source code of the incorporating binary package be made
available. According to Debian Policy ยง7.8 [1] such a binary package
MUST list the glibc source package (and possibly others) in the
Built-Using: field.

Regards
Aurelien

[1] 
https://www.debian.org/doc/debian-policy/ch-relationships.html#additional-source-packages-used-to-build-the-binary-built-using

Reply via email to