Hi,

On Mon, 2024-05-27 at 03:29 +0100, Luca Boccassi wrote:
> TL;DR: drop or downgrade dependency on system-log-daemon from any
> package that declares it

+1. Log service freedom is important. Packages should in general not
pull in a log service as a dependency.

> The list of affected packages according to apt-cache showpkg is not
> that long either:
> 
>   anacron
>   approx
>   fail2ban
>   fwlogwatch
>   heartbeat
>   hippotat-server
>   inetutils-ftpd
>   inetutils-inetd
>   inetutils-talkd
>   inetutils-telnetd
>   ldirectord
>   logcheck
>   lyskom-server
>   prelude-lml
>   psad
>   request-tracker4
>   request-tracker5
>   rlinetd
>   snort
>   socklog-run
>   socklog-run:i386
>   spamd
>   sympa
>   xinetd
>   xwatch
>   zoneminder

At first glance these all look like packages that should leave the
decision whether/how to log to the admin.

However there are false positives: for example xinetd already dropped
the recommendation some time ago (Oct 2023)[1].  Maybe you used
information from stable to generate the list?

Ansgar

  [1]: 
https://tracker.debian.org/news/1474312/accepted-xinetd-123154-1-source-into-unstable/

Reply via email to