Hello, Am Sonntag, 23. Juni 2019, 01:46:09 CEST schrieb Felix Miata:
Stefan Brüns composed on 2019-06-22 19:16 (UTC+0200):
Felix Miata wrote:
Problem: ghostscript-9.27-2.3.i586 requires apparmor-abstractions, but this ...
Solution 3: remove lock to allow installation of apparmor-abstractions-2.13.2-9.2.noarch[OSS] Solution 4: break ghostscript-9.27-2.3.i586 by ignoring some of its dependencies Choose from above solutions by number or skip, retry or cancel [1/2/3/4/s/r/c] (c): 4 Applying solution 4
The correct choice matching upstream openSUSE would have been (3). You chose On the contrary, if apparmo* is not already installed, there is no reason I can imagine to introduce apparmor-* as a consequence of an update to another app that that particular installation has no use for (ghostscript).
There's a reason for this dependency - since some months, we have an AppArmor profile for ghostscript and it's helper scripts (ps2pdf etc.). Yes. technically ghostscript also works without the AppArmor profile, but you'll lack protection against evil files that trigger executing another program unintentionally. I'm probably biased on this ;-) but I'd argue that something that makes ghostscript more secure clearly qualifies for a "Requires". Regards, Christian Boltz --
Weil es seit Jahrzehnten ging? Ich denke wir beide haben sehr unterschiedliche Definitionen von "geht". Ne Pferdekutsche "geht" auch, trotzdem fahren die meisten eher Auto. [> Stephan von Krawczynski und Michael Meyer in opensuse-de]
-- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org