Adrian Irving-Beer wrote: > Package: qemu-kvm > Version: 0.11.1+dfsg-1 > Severity: serious > Justification: Policy 3.5 > > In Debian bug #566028, I reported that the latest version of qemu-system > had an unstated dependency on libgssapi_krb5.so.2. It seems that > qemu-kvm now has the same dependency now as well: > > % ldd /usr/bin/kvm | grep gss > libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x00007f7b648e0000)
neither kvm nor qemu link directly with libgssapi. In order to examine a binary dependencies, use `objdump -p' command. Here it is for the kvm binary from 0.11.1+dfsg-1 package: $ objdump -p usr/bin/kvm ... Dynamic Section: NEEDED libm.so.6 NEEDED libpthread.so.0 NEEDED librt.so.1 NEEDED libz.so.1 NEEDED libasound.so.2 NEEDED libpulse-simple.so.0 NEEDED libgnutls.so.26 NEEDED libsasl2.so.2 NEEDED libbluetooth.so.3 NEEDED libpci.so.3 NEEDED libutil.so.1 NEEDED libSDL-1.2.so.0 NEEDED libX11.so.6 NEEDED libncurses.so.5 NEEDED libvdeplug.so.2 NEEDED libcurl-gnutls.so.4 NEEDED libc.so.6 NEEDED libpulse.so.0 ... ldd reports _all_ needed libraries, including the ones needed by all the above. In our case, it looks like gssapi come from libcurl-gnutls.so.4: $ objdump -p /usr/lib/libcurl-gnutls.so.4 ... NEEDED libgssapi_krb5.so.2 Please verify that libcurl3-gnutls package lists the requiriments properly on your system. > As in that bug, unless I have package "libgssapi-krb5-2" installed > (which is not depended on by any package on my system), I cannot run > qemu-kvm. This is not kvm or qemu bug. A package A should not list all deps of another package B on which A depends. I.e., if A depends on B, and B depends on C, A should only include B in the Depends: field, and not C. Because it is possible to upload a new version of B which will depend on entirely different package D, or even conflict on C. Listing C as a dependency of A will be a bug in this case. /mjt -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
