severity 395272 important
thanks

On Thu, Oct 26, 2006 at 12:43:38AM +0200, Lucas Nussbaum wrote:
> Package: libspork-perl
> Version: 0.20-1
> Severity: serious
> Justification: pseudo-FTBFS (causes extremely long builds) + possible 
> copyright issues
> Tags: patch

> During a rebuild of all packages in etch, I discovered that your package
> required internet access during the build. Quoting #393900:

> Accessing the network during build is bad for these reasons:
> - It's a privacy concern: without being asked, some information about
>   the system is being sent to a remote host;
> - It should be possible to autobuild the package on a buildd with no
>   network access.
> - The test has a high probability to fail lateron because of the
>   referenced host (temporarily) disappearing.

> It seems to call wget to download
> http://search.cpan.org/s/img/cpan_banner.png (this might raise copyright
> issues as well).

First, this is not a copyright issue.  Downloading a file that is made
available on a public website is not a copyright infringement.  Distributing
it in the *binary package* could be, but I don't think that's happening
here.

Second, in light of your explanations in 395262, I think your problem here
is a misconfigured network/host more than anything.  Yes, packages should
build without network access; but your build environment isn't simply
lacking in network access, it has working DNS and global network routes and
a firewall which *silently* blocks outbound HTTP traffic.  You can solve
this problem for yourself simply by instating a firewall rule that REJECTs
outbound HTTP requests instead of just DROPping them.

The prohibition on depending on the network during a build is not meant to
extend to builds *trying* to access the network, which is what these
packages are doing and what your network configuration penalizes them for.

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
[EMAIL PROTECTED]                                   http://www.debian.org/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to