Re: [gentoo-portage-dev] [PATCH v6] Support escaping network-sandbox through SOCKSv5 proxy

[Michał Górny]

Dnia 2015-02-01, o godz. 09:53:59
Michał Górny <mgorny@g.o> napisał(a):

> Add a minimal SOCKSv5-over-UNIX-socket proxy to Portage, and start it
> whenever ebuilds are started with network-sandbox enabled. Pass the
> socket address in PORTAGE_SOCKS5_PROXY and DISTCC_SOCKS_PROXY variables.
> The proxy can be used to escape the network sandbox whenever network
> access is really desired, e.g. in distcc.
>
> The proxy is based on asynchronous I/O using the asyncio module.
> Therefore, it requires the asyncio module that is built-in in Python 3.4
> and available stand-alone for Python 3.3. Escaping the sandbox is not
> supported with older versions of Python.
>
> The proxy supports connecting to IPv6 & IPv4 TCP hosts. UDP and socket
> binding are not supported. SOCKSv5 authentication schemes are not
> supported (UNIX sockets provide a security layer).

And pushed following earlier confirmation :).

-- 
Best regards,
Michał Górny