[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: pybuild and proxies -- could we make "prohibition" optional?



On 07/21/2015 10:21 PM, Dimitri John Ledkov wrote:
> In practice however we do allow accessing debian ftp archive and
> localhost services, thus:
> 
> no_proxy=localhost,*.debian.org
> 
> would probably be better imho for the balance of "don't allow general
> network access", "yet allow sensible networking test-suites to run".

I think no_proxy=localhost would be okay, but *.debian.org should not be
allowed. Packages don't have to be built for Debian after all.

(And yes, I know there is at least one special case that needs to
download data from *.debian.org, but that doesn't imply *.d.o should be
allowed by default.)

Ansgar


Reply to: