[pkg-go] Bug#830209: Bugs: "accesses the internet during build" -- strongly disagree on severity

Dmitry Smirnov onlyjob at debian.org
Wed Jul 13 07:06:25 UTC 2016


On Wednesday, 13 July 2016 9:00:07 AM AEST Chris Lamb wrote:
> > We should not trust build script not to access internet. Even pbuilder
> > limits network access and build servers should do it as well.
> 
> I think you are confused about these bugs. They are being filed against
> packages that attempt network connectiviity but do not FTBFS if those
> requests fail, so disabling internet access on buildds is an related but
> actually different issue altogether.

Makes sense. Thank you.


> Furthermore, keeping packages as-is would still leak the privacy of
> end-users, deriviates, etc. who are rebuilding packages.

Absolutely. 

-- 
Regards,
 Dmitry Smirnov.

---

He who cannot obey himself will be commanded. That is the nature of living
creatures.
        -- Friedrich Nietzsche
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-go-maintainers/attachments/20160713/a1d91f81/attachment.sig>


More information about the Pkg-go-maintainers mailing list