Hey,

Is there any reason why the SOGo debs lists gnustep-make as a Depends?
Doing so causes gobjc to be installed, which in turn also pulls in gcc.

I really dislike having one compiler installed on my servers, let alone
two — it's a great way for attackers to exploit a remote security
vulnerability.

Should gnustep-make be a Build-Depends instead?

Cheers!
//Mike

-- 
Michael Gratton <mich...@quuxo.com>
Quuxo Software <http://web.quuxo.com/>

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to