Package: rhythmbox Version: 0.9.3.1-1 Package: wishlist To a 'standard' user of rhythmbox [1], that just wants to play music, there is really no need to share music services on a LAN. Base on #355234 this does not seem to be even a documented or required feature but the fact that the package Recommends: avahi-daemon gets some users (those that use aptitude, instead of apt-get) to automatically install a network daemon service which, as discussed in the debian-security [2] mailing list is a rather controversial feature.
IMHO Rhythmbox should Suggest: and not Recommend: ahavi-daemon. I'm filing as a different bug than #355064, since that one asks the Gnome maintainers to remove rhythmbox from the task, which is a different thing altogether (although it was open for the very same reason: a user package pulling in an unrequired network service) Regards Javier [1] Whatever that is [2] http://lists.debian.org/debian-security/2006/02/msg00060.html
signature.asc
Description: Digital signature