[pkg-go] Bug#830678: Bugs: "accesses the internet during build" -- strongly disagree on severity

Dmitry Smirnov onlyjob at debian.org
Mon Jul 11 00:12:55 UTC 2016


On Sunday, 10 July 2016 11:28:07 AM AEST Chris Lamb wrote:
> Severity: serious
> Justification: Policy 4.9
> User: lamby at debian.org
> Usertags: network-access

Hi Chris,

Thank you for submitting those bugs. I agree that it is a legitimate problem 
that needs addressing. However I strongly disagree with severity of those 
bugs. Obviously packages should not download anything during build for 
security and reproducibility reasons. But here post-build tests attempt to 
access internet which is relatively harmless in this context. Indeed tests 
trying to access internet from offline environment is hardly a "serious" 
problem regardless of what policy says.
Thanks to your bug reports we will eventually address and fix those problems. 
In the mean time this should not block testing migrations so I'm lowering 
severity of those bugs and I recommend submitting similar bugs with severity 
not higher than "important".

-- 
All the best,
 Dmitry Smirnov.

---

The most fatal blow to progress is slavery of the intellect. The most
sacred right of humanity is the right to think, and next to the right to
think is the right to express that thought without fear.
        -- Helen H. Gardner, "Men, Women and Gods"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-go-maintainers/attachments/20160711/6151e259/attachment-0012.sig>


More information about the Pkg-go-maintainers mailing list