[ 
https://issues.apache.org/jira/browse/DAFFODIL-602?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Mike Beckerle resolved DAFFODIL-602.
------------------------------------
    Resolution: Abandoned

Closing. Not needed. Daffodil uses many libraries. Guaranteeing none of those 
attempt an outbound connection is not possible. 

Environments that run Daffodil must ensure that nothing can connect outbound. 

> Setting to prevent off-box (network, external) access to schemas
> ----------------------------------------------------------------
>
>                 Key: DAFFODIL-602
>                 URL: https://issues.apache.org/jira/browse/DAFFODIL-602
>             Project: Daffodil
>          Issue Type: New Feature
>          Components: API, Front End
>    Affects Versions: s8
>            Reporter: Mike Beckerle
>            Priority: Major
>
> For many DFDL applications this is a must-have capability. 
> Systems whose job is to scrutinize data carefully must have a controlled base 
> of DFDL schemas that are well trusted. 
> Reaching out the internet to get schemas is definitely unacceptable for these 
> applications.
> As for how to test this.... keep in mind that just disconnecting a test box 
> from the internet won't do it. A test might not fail just because a probe for 
> a schema on the internet failed. It might behave in some different manner if 
> it is unable to successfully reach the internet, yet still be making the 
> attempts. The requirement here is that it not even be attempting to contact 
> the internet to get schemas.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to