From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 7120476383164235776 X-Received: by 2002:a05:6870:c10b:b0:10d:1992:f249 with SMTP id f11-20020a056870c10b00b0010d1992f249mr1610606oad.256.1658296050638; Tue, 19 Jul 2022 22:47:30 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a05:6870:a582:b0:10c:41e7:bfd9 with SMTP id c2-20020a056870a58200b0010c41e7bfd9ls82531oam.2.-pod-prod-gmail; Tue, 19 Jul 2022 22:47:30 -0700 (PDT) X-Google-Smtp-Source: AGRyM1s+R5nR1RxIzNbT8mHBJJFr2/KjxUskTB5ysDTgIXooi/sp/q40BbfytC/2OJ9GeaEQm3YZ X-Received: by 2002:a05:6871:8a:b0:10b:ad08:894e with SMTP id u10-20020a056871008a00b0010bad08894emr1698461oaa.10.1658296050092; Tue, 19 Jul 2022 22:47:30 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1658296050; cv=none; d=google.com; s=arc-20160816; b=k3hAjJjuOXX9QGFiTxBWlS9lKt8oZUyL8XNECv+mGqylp/SjH//G7uU6moj7WQlibN lAm/fPX2qPZaF8MBv2ILWx/FaBQpIzk7qk12HWAseJy/qNIr9wx8D4eOur1ewg058NIv j4i5lHFaGhg7ghUB+Y4FDQsNbJFBvrrxangZEgoLl3oEUcRt1OoOGuxUN2QF1NtPpMiU yGTHTFUKOY+FtikMHcnQcWfY5AHs2xLjBM9+3snPy5JobgLp86PqET1JgevR+Straz/L U2H6UIVeNKxHO37v6AhxCV2kgZZQd5LLilkxqNtyVIVTsm5QxsP6PlgzXDu1OYULVN14 53Bw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id; bh=LyJ7k2C9CHopm/S0Zul1rz8EzplYjXJY89wfrYkWHw0=; b=uG1jOiysp4PoS3rLo1hGjQOW+XMLWJCsUrVpkXW9+x8yG0Qc8NY0LOqQwdsdMWNjFP OABo1sjy1e13eH61U0HFUTAWiwr6lvgUs58IJaIXMmcqim5l6NwIsFfLJ0BQ9BXGkeHp YZjsrGa2xvYwJC7t4DNT16lfdhRz7dg9t+yWvYbp8CVC3ZbOo55yboXaX5D8xwzAe/xA bL/fMtyuitVmXvLqKBAdxvQxMq7Ct30aUUTYkuWz+gBQXLAZZSe2E2QWMC40zXULwdYa rwHZfWE9bKI2yOT4uAygZ1Q8AzL0vDxq08Wu7FXvNM/axi+8FvZUdUp138BHF0Elil96 oRSQ== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=amikan@ilbers.de Return-Path: Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id g49-20020a9d12b4000000b0061c75baa082si727409otg.2.2022.07.19.22.47.29 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Tue, 19 Jul 2022 22:47:29 -0700 (PDT) Received-SPF: pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=amikan@ilbers.de Received: from [127.0.0.1] (host-80-81-17-52.static.customer.m-online.net [80.81.17.52]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPSA id 26K5lQjO018828 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 20 Jul 2022 07:47:27 +0200 Message-ID: Date: Wed, 20 Jul 2022 08:47:25 +0300 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.9.1 Subject: Re: [PATCH v3 10/20] meta: mark network and sudo tasks Content-Language: en-US To: "Schmidt, Adriaan" , "isar-users@googlegroups.com" References: <20220719130000.15943-1-amikan@ilbers.de> <20220719130000.15943-11-amikan@ilbers.de> From: Anton Mikanovich In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: Zi211hqoHCB0 20.07.2022 08:40, Schmidt, Adriaan wrote: > Anton Mikanovich, Dienstag, 19. Juli 2022 15:00: >> Network access from tasks is now disabled by default. This means that >> tasks accessing the network need to be marked as such with the network >> flag. >> >> The same marking is also required for the tasks used sudo. > When testing in one of our downstream layers I found that the task > do_containerize in imagetypes_container.bbclass also needs [network] = "1". > > Adriaan Will add in next version, thanks for checking. There are two main places to test for some missed changes: 1) missed network flags 2) missed old-syntax overrides