On 07/21/2015 10:21 PM, Dimitri John Ledkov wrote: > In practice however we do allow accessing debian ftp archive and > localhost services, thus: > > no_proxy=localhost,*.debian.org > > would probably be better imho for the balance of "don't allow general > network access", "yet allow sensible networking test-suites to run".
I think no_proxy=localhost would be okay, but *.debian.org should not be allowed. Packages don't have to be built for Debian after all. (And yes, I know there is at least one special case that needs to download data from *.debian.org, but that doesn't imply *.d.o should be allowed by default.) Ansgar -- To UNSUBSCRIBE, email to debian-python-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/55af7779.3050...@debian.org
