legal-info: allow to declare the actual sources for binary packages