Re: Network access during build
On Thu, 08 Sep 2016, Russ Allbery wrote:
> gregor herrmann <gregoa@debian.org> writes:
> > IIRC (I didn't re-read the whole bug log now) the intention in
> > #770016 was indeed more than "not affect the build result" but
> > "explicitly forbid any attempt to access the network because leak".
>
> > As a result policy 4.9. now says:
>
> > For packages in the main archive, no required targets may attempt
> > network access.
>
> > which in my understanding makes a DNS lookup for example.org in a
> > test which fails gracefully and has no relation whatsoever to the
> > resulting binary package a policy violation and thereby an RC bug.
>
> > If this was not the original intention or if the community now comes
> > to the conclusion that this is maybe a bit over the top (as Russ' and
> > Vorlon's mails seem to imply, and I share their sentiments), I think
> > we need to change the wording in policy.
>
> Yeah, I think we want a "must not fail when it doesn't have network
> access" (that's the legit RC bug, because it makes the build not work in
"must not change build behavior or build result depending on network
availability" is also needed somewhere, if it is not already in there.
--
Henrique Holschuh
Reply to: