You are viewing a plain text version of this content. The canonical link for it is here.
Posted to builds@apache.org by Mark Thomas <ma...@apache.org> on 2020/03/02 15:29:31 UTC

Reminder: Tests should not be listening on public IP addresses

Hi all,

After a recent round of Java security announcements this is just a
reminder that tests should not be opening sockets and listening for
connections on public IP addresses.

If you need to start a server as part of a test, please ensure that the
server socket is bound to the local loopback address.

While it was Java that triggered this reminder, it applies equally to
all projects using the ASF CI services.

Thanks,

Mark
on behalf of the ASF Infrastructure Team