Bug#833503: autopkgtest: accesses the internet during build

Chris Lamb lamby at debian.org
Mon Aug 15 10:35:09 UTC 2016

Hi Martin,

> Sorry, but "leaking privacy" is not convincing at all. A machine that
> builds packages downloads packages from the configured mirror via apt
> all the time

Let's distinguish two distinct questions here; I fear we are jumping
between the two when making our points:

 a) whether a package build can access/ping/whatever random-site.org
    during build.

 b) whether a package build can obtain "further" packages via the configured
    apt mirror.

To me, "a" is an obvious privacy leak. "b" is absolutely fine as long its
the configured mirror (not, for example, some hardcoded global APT mirror).


     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk

More information about the autopkgtest-devel mailing list