From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 7172560304523444224 X-Received: by 2002:a0c:ab4d:0:b0:4c6:f6e4:93e2 with SMTP id i13-20020a0cab4d000000b004c6f6e493e2mr36982650qvb.105.1671202346734; Fri, 16 Dec 2022 06:52:26 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:ac8:7643:0:b0:3a5:4442:58e3 with SMTP id i3-20020ac87643000000b003a5444258e3ls2011918qtr.7.-pod-prod-gmail; Fri, 16 Dec 2022 06:52:26 -0800 (PST) X-Google-Smtp-Source: AMrXdXuMlJGHDdX+ZUNRvq0WfMlQm0Sr9HFzWji2Mf0SJ1vSyNF4UJlg9GZRwMukylTb3Lkw1oqc X-Received: by 2002:a05:622a:90c:b0:3a8:5d1:aacd with SMTP id bx12-20020a05622a090c00b003a805d1aacdmr4295267qtb.15.1671202346119; Fri, 16 Dec 2022 06:52:26 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1671202346; cv=none; d=google.com; s=arc-20160816; b=R9Zsdv/UUHlsmMePD1oVLHk7RyPmxgJPyiCwJGfS61xDoxJcubUefMiM5Wdu7U1+Nh ZoMdm4W/63Ape4OOeTbnprk5HRsTCtEsJM1xSsXv6HtGw2+QizWc6PbqBkXaks0/gRU1 OHd86bM8DeE2ah3dnctYRcbaZ/eZwJpBBrwnBNS+uwz9X25EuIt6kOW54jDYzEAsx7GM 7MG197Kv14iZeEcmJs26P8r/tEbH++oqXD3rTB3WSN8W7zYrww7SFlJOKUBuEJ0T7dd0 b3GEf/KUgkXmBWkUu86ZbKeCll5nmuqFDf7eNPs208y655hB2mpjJ8s4B6l+EIuF2tmD beNg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id; bh=fgfe+3D7aAjCHhcBQ+ubD6EHCpSNngCwPK4m3s846pI=; b=UImTGKLHqyP6p+O6f9Xo1UT3+v0f79Mhv4Uo07E4r4C5MAciYjFQLt575P852qNj92 gFYJz4w4kY3C84+afNg7Mhx7PB79LnrrAI78oUdmtE5tSbud/hAb9cQv/zWK+HrFHkLP n4F6GHgmJ/RYN+L8iDi/jW6fhmudVYTsY/Kd7x/kTfZhp3ePYKW9PDpfqkO716KbgVrP OAUU6kO/LIYtqabjb99yKM/9LgAehBMmghYkr9hqDr/DDsQnzUG0NvcEeKjDBojbp5f2 h/q7ILizVRmwt9xW79ucPC9NDjn9sXmiOjY2HTUW20UBGNKMB9m8SlrZojIip+aZbGvf z0qA== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=amikan@ilbers.de Return-Path: Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id r13-20020ac85e8d000000b003a803b27748si123213qtx.0.2022.12.16.06.52.25 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Fri, 16 Dec 2022 06:52:26 -0800 (PST) Received-SPF: pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=amikan@ilbers.de Received: from [127.0.0.1] (host-80-81-17-52.static.customer.m-online.net [80.81.17.52]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPSA id 2BGEqMPJ016668 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 16 Dec 2022 15:52:23 +0100 Message-ID: <8cac9912-2ba4-b86b-1229-ba5d59412764@ilbers.de> Date: Fri, 16 Dec 2022 17:52:22 +0300 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.4.2 Subject: Re: [PATCH v6 10/21] meta: mark network and sudo tasks Content-Language: en-US To: Henning Schild Cc: isar-users@googlegroups.com References: <20221213125305.10984-1-amikan@ilbers.de> <20221213125305.10984-11-amikan@ilbers.de> <20221216154901.34c1c2bd@md1za8fc.ad001.siemens.net> From: Anton Mikanovich In-Reply-To: <20221216154901.34c1c2bd@md1za8fc.ad001.siemens.net> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: uDl7nS0jTE0p 16.12.2022 17:49, Henning Schild wrote: > Am Tue, 13 Dec 2022 15:52:54 +0300 > schrieb Anton Mikanovich : > >> Network access from tasks is now disabled by default. This means that >> tasks accessing the network need to be marked as such with the network >> flag. > Will these tasks really somehow be blocked from the network? > > We do use BB_NO_NETWORK in several places. Especially in > isar_export_proxies we use it to block network with a deadend_proxy. > That might not be needed any longer. > > Any maybe we find a way to automatically call isar_export_proxies when > we set [network] = 1 in any given task. Otherwise we kind of have two > lines marking a task as network user, and it is easy to forget the > proxies since not everyone has to deal with them. > > Henning Untagged tasks will not be blocked, but failed during the build instead. So this will not cover BB_NO_NETWORK use case.