Bug 530087

Summary: create avahi-libs sub-package
Product: [Fedora] Fedora Reporter: Tim Waugh <twaugh>
Component: avahiAssignee: Lennart Poettering <lpoetter>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: rawhideCC: bnocera, lpoetter, mclasen, warthog9, yaneti
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 684970 684971 (view as bug list) Environment:
Last Closed: 2010-04-19 16:24:07 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 684970, 684971    

Description Tim Waugh 2009-10-21 14:05:08 UTC
Description of problem:
In the same way that cups-libs is a sub-package of cups, with the server part being in the main 'cups' package and the libraries in 'cups-libs', I think avahi needs to package its libraries in a separate avahi-libs sub-package.

Version-Release number of selected component (if applicable):
avahi-0.6.25-5.fc12.x86_64

How reproducible:
100%

Steps to Reproduce:
1.rpm --test -e avahi --allmatches 2>&1| grep cups-1
  
Actual results:
	libavahi-client.so.3()(64bit) is needed by (installed) cups-1:1.4.1-10.fc12.x86_64
	libavahi-common.so.3()(64bit) is needed by (installed) cups-1:1.4.1-10.fc12.x86_64

Expected results:
No output.

Additional info:
The avahi package should be installed by comps, not by dependencies.  In a similar way, cups is installed by comps instead of being a dependency of e.g. gtk2 which uses libcups.

Original bug report: bug #513559

Comment 1 Bug Zapper 2009-11-16 13:57:43 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 12 development cycle.
Changing version to '12'.

More information and reason for this action is here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 2 Matthias Clasen 2009-12-08 04:43:30 UTC
Makes sense to me, but we probably want to target F13 for this now.

Comment 3 Yanko Kaneti 2009-12-08 06:54:05 UTC
*** Bug 542775 has been marked as a duplicate of this bug. ***

Comment 4 Bug Zapper 2010-03-15 12:57:42 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 13 development cycle.
Changing version to '13'.

More information and reason for this action is here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 5 seth vidal 2010-04-12 18:42:44 UTC
pinging on this one again - subject came up on an irc discussion and I remembered this bug.

I realize it is too late for F13 at this point - but maybe rawhide?
thanks

Comment 6 John 'Warthog9' Hawley 2010-04-12 18:49:30 UTC
I'd argue that this needs to happen in F13, heck I'd argue this needs to get back ported to F11 and F12 (depending on when support gets dropped for F11).  It's just the fact that avahi is going to get turned on for a lot of server installs that aren't expecting it (and arguably a lot of desktop / laptop installs that might not want it as well).

Comment 7 Bastien Nocera 2010-04-14 09:01:57 UTC
I don't see the point given that it'll be blocked off by default, by the firewall, and that you'd need to explicitely unblock it from the firewall for it to do anything. At that point, you might as well be disabling it running altogether.

Comment 8 John 'Warthog9' Hawley 2010-04-14 18:37:07 UTC
(In reply to comment #7)
> I don't see the point given that it'll be blocked off by default, by the
> firewall, and that you'd need to explicitely unblock it from the firewall for
> it to do anything. At that point, you might as well be disabling it running
> altogether.    

Your making the assumption that the firewall is either running at all, running in the default configuration or that an attack at the local system is impossible.  There are specific reasons why an end user, in particular servers, don't run firewalls, or run firewalls that are incredibly targeted and specific.  Depending on your firewall to protect you against this particular problem means you've already failed.

Here's the fundamental problem that started this whole debate, if I as a server administrator am not running avahi, have a machine on the public internet and such suddenly decide to install ImageMagick, a completely unrelated package that should *NOT* involve any new services I am suddenly bringing in avahi and it's starting by default.  It's the completely unexpected implication that anything I want that needs ghostscript will mean that I not only suddenly have bloat installed, but that I'm not by default running a service I wasn't expecting.

Comment 9 Bastien Nocera 2010-04-19 16:24:07 UTC
Done in avahi-0.6.25-7.fc14.