From ec79dc17464c4ba096147d84a22ff51f79ce6055 Mon Sep 17 00:00:00 2001
From: veilor <veilor@localhost>
Date: Thu, 30 Apr 2026 04:24:20 +0100
Subject: [PATCH] =?UTF-8?q?ks:=20keep=20avahi-libs/pcsc-lite=20=E2=80=94?=
 =?UTF-8?q?=20daemons=20disabled=20at=20runtime,=20libs=20broadly=20requir?=
 =?UTF-8?q?ed?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 kickstart/veilor-os.ks | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/kickstart/veilor-os.ks b/kickstart/veilor-os.ks
index cf2ab18..c25ebf7 100644
--- a/kickstart/veilor-os.ks
+++ b/kickstart/veilor-os.ks
@@ -79,22 +79,21 @@ fontconfig
 freetype
 fira-code-fonts
 
-# remove fluff
+# remove fluff (only items not transitively required by KDE/samba)
+# Note: avahi-libs and pcsc-lite kept because libavahi-client.so.3 and PCSC libs
+# are broadly required (samba, libtinysparql, gtk3, ibus). The *daemons* are
+# disabled at runtime via 20-harden-kernel.sh.
 -cups
 -cups-browsed
 -abrt*
 -snapd
 -geoclue2
--avahi
--avahi-libs
 -kde-connect
 -open-vm-tools-desktop
 -PackageKit
 -PackageKit-command-not-found
 -mlocate
 -ModemManager
--pcsc-lite
--rsync-daemon
 
 %end