Package: integrit Version: 4.1-3 Severity: serious Justification: Policy 7.8
Dear maintainer, The integrit packages provides the following files, which are statically linked against glibc: /usr/sbin/integrit /usr/sbin/i-viewdb /usr/bin/i-ls glibc is mostly is mostly licensed under the LGPL, which requires that the full source code of the incorporating binary package be made available. According to Debian Policy ยง7.8 [1] such a binary package MUST list the glibc source package (and possibly others) in the Built-Using: field. Regards Aurelien [1] https://www.debian.org/doc/debian-policy/ch-relationships.html#additional-source-packages-used-to-build-the-binary-built-using