diff options
author | thegeorg <thegeorg@yandex-team.ru> | 2022-02-10 16:45:12 +0300 |
---|---|---|
committer | Daniil Cherednik <dcherednik@yandex-team.ru> | 2022-02-10 16:45:12 +0300 |
commit | 49116032d905455a7b1c994e4a696afc885c1e71 (patch) | |
tree | be835aa92c6248212e705f25388ebafcf84bc7a1 /build/rules | |
parent | 4e839db24a3bbc9f1c610c43d6faaaa99824dcca (diff) | |
download | ydb-49116032d905455a7b1c994e4a696afc885c1e71.tar.gz |
Restoring authorship annotation for <thegeorg@yandex-team.ru>. Commit 2 of 2.
Diffstat (limited to 'build/rules')
-rw-r--r-- | build/rules/contrib_deprecated.policy | 106 | ||||
-rw-r--r-- | build/rules/contrib_deps.policy | 30 | ||||
-rw-r--r-- | build/rules/contrib_python.policy | 12 | ||||
-rw-r--r-- | build/rules/contrib_restricted.policy | 52 | ||||
-rw-r--r-- | build/rules/maps/maps.policy | 70 |
5 files changed, 135 insertions, 135 deletions
diff --git a/build/rules/contrib_deprecated.policy b/build/rules/contrib_deprecated.policy index d3f06e8232..5f6f93ac4f 100644 --- a/build/rules/contrib_deprecated.policy +++ b/build/rules/contrib_deprecated.policy @@ -1,53 +1,53 @@ -# == Rules for contrib/deprecated section == -# -# NOTE: rules should be ordered from specific to generic (first matching rule is used) -# See rule syntax docs: https://wiki.yandex-team.ru/devrules/overall/peerdirprohibition/ - -ALLOW library/cpp/tf/mkldnn -> contrib/deprecated/onednn - -ALLOW mds/libs/blackhole -> contrib/deprecated/libcds -ALLOW mds -> contrib/deprecated/folly -ALLOW mds -> contrib/deprecated/wangle - -# Use newer version from contrib/libs/mongo-cxx-driver instead -ALLOW mds/mastermind/ -> contrib/deprecated/mongo-cxx-driver - -# libpqtypes is not being developed since 2016 and is known to have bugs. -# Consider using libpqxx / maps/libs/sql_chemistry instread. -ALLOW mds/libs/postgres -> contrib/deprecated/libpqtypes -ALLOW mds/libs/s3 -> contrib/deprecated/libpqtypes - -# Use library/cpp/json (a rapidjson proxy) instead -ALLOW alice/cuttlefish/library/client_proto_converter -> contrib/deprecated/jsoncpp -ALLOW mail/ -> contrib/deprecated/jsoncpp -ALLOW quasar/backend/ -> contrib/deprecated/jsoncpp -ALLOW smart_devices/ -> contrib/deprecated/jsoncpp -ALLOW speechkit/ -> contrib/deprecated/jsoncpp -ALLOW yandex_io/ -> contrib/deprecated/jsoncpp - -# mimepp is not being developed since 2012 and requires paid license -ALLOW mail/so/ -> contrib/deprecated/mimepp -ALLOW mail/so/spamstop/ -> contrib/deprecated/udns - -# TODO(thegeorg@): remove this specifying better policies -ALLOW .* -> contrib/deprecated/python - -ALLOW metrika/core/programs/mobile-redirect -> contrib/deprecated/libctpp - -# argon2 is not maintained since 20190702 and can not be build for ARMv8. -# consider using library/cpp/digest/argonish instead -# -# Remove this exception after KIKIMR-13008 -ALLOW kikimr/library/login -> contrib/deprecated/argon2 - -# Though galloc is unmaintained version of tcmalloc, -# it can not be universally replaced with the latter. -ALLOW library/cpp/malloc/galloc -> contrib/deprecated/galloc - -# Default policies: -# -# Do not restrict contrib -# All peerdirs to contrib/deprecated from outside are prohibited -# -ALLOW contrib -> contrib/deprecated -DENY .* -> contrib/deprecated +# == Rules for contrib/deprecated section == +# +# NOTE: rules should be ordered from specific to generic (first matching rule is used) +# See rule syntax docs: https://wiki.yandex-team.ru/devrules/overall/peerdirprohibition/ + +ALLOW library/cpp/tf/mkldnn -> contrib/deprecated/onednn + +ALLOW mds/libs/blackhole -> contrib/deprecated/libcds +ALLOW mds -> contrib/deprecated/folly +ALLOW mds -> contrib/deprecated/wangle + +# Use newer version from contrib/libs/mongo-cxx-driver instead +ALLOW mds/mastermind/ -> contrib/deprecated/mongo-cxx-driver + +# libpqtypes is not being developed since 2016 and is known to have bugs. +# Consider using libpqxx / maps/libs/sql_chemistry instread. +ALLOW mds/libs/postgres -> contrib/deprecated/libpqtypes +ALLOW mds/libs/s3 -> contrib/deprecated/libpqtypes + +# Use library/cpp/json (a rapidjson proxy) instead +ALLOW alice/cuttlefish/library/client_proto_converter -> contrib/deprecated/jsoncpp +ALLOW mail/ -> contrib/deprecated/jsoncpp +ALLOW quasar/backend/ -> contrib/deprecated/jsoncpp +ALLOW smart_devices/ -> contrib/deprecated/jsoncpp +ALLOW speechkit/ -> contrib/deprecated/jsoncpp +ALLOW yandex_io/ -> contrib/deprecated/jsoncpp + +# mimepp is not being developed since 2012 and requires paid license +ALLOW mail/so/ -> contrib/deprecated/mimepp +ALLOW mail/so/spamstop/ -> contrib/deprecated/udns + +# TODO(thegeorg@): remove this specifying better policies +ALLOW .* -> contrib/deprecated/python + +ALLOW metrika/core/programs/mobile-redirect -> contrib/deprecated/libctpp + +# argon2 is not maintained since 20190702 and can not be build for ARMv8. +# consider using library/cpp/digest/argonish instead +# +# Remove this exception after KIKIMR-13008 +ALLOW kikimr/library/login -> contrib/deprecated/argon2 + +# Though galloc is unmaintained version of tcmalloc, +# it can not be universally replaced with the latter. +ALLOW library/cpp/malloc/galloc -> contrib/deprecated/galloc + +# Default policies: +# +# Do not restrict contrib +# All peerdirs to contrib/deprecated from outside are prohibited +# +ALLOW contrib -> contrib/deprecated +DENY .* -> contrib/deprecated diff --git a/build/rules/contrib_deps.policy b/build/rules/contrib_deps.policy index bfb6a03d14..9af4b85cc2 100644 --- a/build/rules/contrib_deps.policy +++ b/build/rules/contrib_deps.policy @@ -1,4 +1,4 @@ -ALLOW contrib/clickhouse -> library/cpp/consistent_hashing +ALLOW contrib/clickhouse -> library/cpp/consistent_hashing ALLOW contrib -> contrib ALLOW contrib -> build ALLOW contrib -> library/python/resource @@ -54,23 +54,23 @@ ALLOW contrib/python/psycopg2/tests -> mail/devpack ALLOW contrib/python/asn1crypto -> library/python/symbols/crypto ALLOW contrib/python/win_unicode_console -> library/python/symbols/win_unicode_console ALLOW contrib/python/pycryptodome -> library/python/symbols/registry - -ALLOW contrib/tests/python -> library/python/fs - -ALLOW contrib/tests/subversion -> vcs/svn/run -ALLOW contrib/tests/subversion -> vcs/svn/test - -ALLOW contrib/tests/subvertpy -> devtools/ya/exts -ALLOW contrib/tests/subvertpy -> devtools/ya/yalibrary/svn/testing -ALLOW contrib/tests/subvertpy -> library/python/windows -ALLOW contrib/tests/subvertpy -> vcs/svn/wc/client - + +ALLOW contrib/tests/python -> library/python/fs + +ALLOW contrib/tests/subversion -> vcs/svn/run +ALLOW contrib/tests/subversion -> vcs/svn/test + +ALLOW contrib/tests/subvertpy -> devtools/ya/exts +ALLOW contrib/tests/subvertpy -> devtools/ya/yalibrary/svn/testing +ALLOW contrib/tests/subvertpy -> library/python/windows +ALLOW contrib/tests/subvertpy -> vcs/svn/wc/client + ALLOW contrib/tools/unbound -> infra/libs ALLOW contrib/tools/unbound -> library/cpp/proto_config ALLOW contrib/python/marshmallow-mongoengine/py[23]/tests -> library/python/pytest-mongodb -# contrib tests is written by us, hence everything is allowed -ALLOW contrib/tests -> .* - +# contrib tests is written by us, hence everything is allowed +ALLOW contrib/tests -> .* + DENY contrib -> .* diff --git a/build/rules/contrib_python.policy b/build/rules/contrib_python.policy index 3b74d891d0..60fd149753 100644 --- a/build/rules/contrib_python.policy +++ b/build/rules/contrib_python.policy @@ -686,12 +686,12 @@ ALLOW quality/ab_testing/cofe/bin/lib/files/py3/cofe_kernel_yql -> contrib/pytho ALLOW yql/udfs/common/python/python3 -> contrib/python/sqlalchemy/sqlalchemy-1.2 ALLOW yql/udfs/common/python/python_arc -> contrib/python/sqlalchemy/sqlalchemy-1.2 DENY .* -> contrib/python/sqlalchemy/sqlalchemy-1.2 - -# As agreed in https://st.yandex-team.ru/CONTRIB-2183 -# (use contrib/python/marshmallow_dataclass instead) -ALLOW education/ -> contrib/python/dataclasses-json -DENY .* -> contrib/python/dataclasses-json - + +# As agreed in https://st.yandex-team.ru/CONTRIB-2183 +# (use contrib/python/marshmallow_dataclass instead) +ALLOW education/ -> contrib/python/dataclasses-json +DENY .* -> contrib/python/dataclasses-json + # https://st.yandex-team.ru/CONTRIB-2222 ALLOW browser/infra/.* -> contrib/python/hurry.filesize DENY .* -> contrib/python/hurry.filesize diff --git a/build/rules/contrib_restricted.policy b/build/rules/contrib_restricted.policy index 43aace8fe7..a83ead1904 100644 --- a/build/rules/contrib_restricted.policy +++ b/build/rules/contrib_restricted.policy @@ -8,8 +8,8 @@ ALLOW strm/cv/ffmpeg_adcv/toshik_filters -> contrib/restricted/ffmpeg-3-scale-ip # CityHash-1.0.2 is a specific version hardwired into ClickHouse public interface ALLOW clickhouse -> contrib/restricted/cityhash-1.0.2 -ALLOW library/cpp/clickhouse -> contrib/restricted/cityhash-1.0.2 -ALLOW saas/library/hash_to_block_mode -> contrib/restricted/cityhash-1.0.2 +ALLOW library/cpp/clickhouse -> contrib/restricted/cityhash-1.0.2 +ALLOW saas/library/hash_to_block_mode -> contrib/restricted/cityhash-1.0.2 # dragonbox is a specific library for float formatting ALLOW clickhouse -> contrib/restricted/dragonbox @@ -39,7 +39,7 @@ ALLOW passport/infra -> contrib/restricted/thrift ALLOW passport/infra -> contrib/restricted/keyutils # For Apache Arrow: CONTRIB-1662 -ALLOW mds -> contrib/restricted/uriparser +ALLOW mds -> contrib/restricted/uriparser # https://st.yandex-team.ru/CONTRIB-2020 ALLOW weather -> contrib/restricted/range-v3 @@ -92,27 +92,27 @@ ALLOW smart_devices/tools/updater -> contrib/restricted/spdlog # cmph is a limited-use library ALLOW ads/yacontext -> contrib/restricted/cmph -# http-parser is a low-level parser for http bytestream. -# Consider using high-level alternatives. +# http-parser is a low-level parser for http bytestream. +# Consider using high-level alternatives. ALLOW mds -> contrib/restricted/http-parser ALLOW taxi/uservices -> contrib/restricted/http-parser ALLOW yt/yt/core/http -> contrib/restricted/http-parser ALLOW yweb/robot/fetcher/fetcher/user/http -> contrib/restricted/http-parser - + # Prefer using skynet for data distribution ALLOW maps/infra/ecstatic -> contrib/restricted/libtorrent -# Consider using util / library/cpp/digest versions instead of a raw murmurhash functions. -# -# strm/common/go/pkg/murmur3 is a CGO binding to murmurhash, thus dependency is allowed -ALLOW strm/common/go/pkg/murmur3 -> contrib/restricted/murmurhash +# Consider using util / library/cpp/digest versions instead of a raw murmurhash functions. +# +# strm/common/go/pkg/murmur3 is a CGO binding to murmurhash, thus dependency is allowed +ALLOW strm/common/go/pkg/murmur3 -> contrib/restricted/murmurhash ALLOW clickhouse -> contrib/restricted/murmurhash - -# exiv2 is GPL-licensed. Only small subset of our libraries can use it. -ALLOW extsearch/images/chunks/exiftags -> contrib/restricted/exiv2 -ALLOW maps/wikimap/mapspro/services/mrc/libs/common -> contrib/restricted/exiv2 -ALLOW yweb/disk/ocraas -> contrib/restricted/exiv2 - + +# exiv2 is GPL-licensed. Only small subset of our libraries can use it. +ALLOW extsearch/images/chunks/exiftags -> contrib/restricted/exiv2 +ALLOW maps/wikimap/mapspro/services/mrc/libs/common -> contrib/restricted/exiv2 +ALLOW yweb/disk/ocraas -> contrib/restricted/exiv2 + # Only allow boost in yandex projects listed below ALLOW adfox -> contrib/restricted/boost ALLOW ads -> contrib/restricted/boost @@ -125,8 +125,8 @@ ALLOW extsearch/geo/poi_service/tools/storage_reader -> contrib/restricted/boost ALLOW infra/contrib/pdns -> contrib/restricted/boost ALLOW juggler/pongerd -> contrib/restricted/boost ALLOW lbs/locator -> contrib/restricted/boost -ALLOW library/cpp/testing/boost_test$ -> contrib/restricted/boost/libs/test -ALLOW library/cpp/testing/boost_test_main$ -> contrib/restricted/boost/libs/test +ALLOW library/cpp/testing/boost_test$ -> contrib/restricted/boost/libs/test +ALLOW library/cpp/testing/boost_test_main$ -> contrib/restricted/boost/libs/test ALLOW library/cpp/testing/gtest_boost_extensions -> contrib/restricted/boost ALLOW logbroker/pipe-parser -> contrib/restricted/boost ALLOW mail -> contrib/restricted/boost @@ -157,7 +157,7 @@ ALLOW sdg/library/cpp/ros_msg_parser -> contrib/restricted/boost ALLOW search/meta/scatter/ant -> contrib/restricted/boost ALLOW search/meta/scatter/ut -> contrib/restricted/boost -# use GTEST target in ya.make instead of PEERDIRing contrib/restricted/googletest +# use GTEST target in ya.make instead of PEERDIRing contrib/restricted/googletest # and include <library/cpp/testing/gtest.h> instead of <gtest/gtest.h> (<gmock/gmock.h>) ALLOW contrib -> contrib/restricted/googletest ALLOW library/cpp/testing/gmock_in_unittest -> contrib/restricted/googletest @@ -172,9 +172,9 @@ ALLOW mail -> contrib/restricted/googletest ALLOW maps/mobile/libs -> contrib/restricted/googletest ALLOW maps/mobile/bundle -> contrib/restricted/googletest ALLOW mds -> contrib/restricted/googletest -# A mere proxy to allow using gmock in libraries without being bound to specific test framework -# See IGNIETFERRO-1827 for details. -ALLOW library/cpp/testing/gmock -> contrib/restricted/googletest/googlemock +# A mere proxy to allow using gmock in libraries without being bound to specific test framework +# See IGNIETFERRO-1827 for details. +ALLOW library/cpp/testing/gmock -> contrib/restricted/googletest/googlemock # allow usage of MIT part ALLOW .* -> contrib/restricted/librseq/headeronly @@ -185,9 +185,9 @@ ALLOW cloud/filestore/gateway/nfs -> contrib/restricted/nfs_ganesha ALLOW yandex_io -> contrib/restricted/patched/hostap_client # Default policies: -# -# Do not restrict contrib -# All peerdirs to contrib/restricted from outside are prohibited -# +# +# Do not restrict contrib +# All peerdirs to contrib/restricted from outside are prohibited +# ALLOW contrib -> contrib/restricted DENY .* -> contrib/restricted diff --git a/build/rules/maps/maps.policy b/build/rules/maps/maps.policy index 4e93f7d152..8abf3fbbd7 100644 --- a/build/rules/maps/maps.policy +++ b/build/rules/maps/maps.policy @@ -5,37 +5,37 @@ ALLOW taxi/tools/dorblu -> maps/libs/deprecated/bson ALLOW maps/masstransit/info -> maps/libs/deprecated/mongo ALLOW taxi/tools/dorblu -> maps/libs/deprecated/mongo -# Use maps/libs/locale instead -ALLOW maps/automotive/remote_access/libs/i18n -> maps/libs/deprecated/localeutils -ALLOW maps/carparks/renderer/datasource -> maps/libs/deprecated/localeutils -ALLOW maps/fastcgi/tilerenderer-serv -> maps/libs/deprecated/localeutils -ALLOW maps/garden/modules/renderer_denormalization -> maps/libs/deprecated/localeutils -ALLOW maps/infopoint -> maps/libs/deprecated/localeutils -ALLOW maps/jams/renderer2 -> maps/libs/deprecated/localeutils -ALLOW maps/libs/i18n -> maps/libs/deprecated/localeutils -ALLOW maps/libs/i18n-geobase -> maps/libs/deprecated/localeutils -ALLOW maps/libs/jams/static-graph -> maps/libs/deprecated/localeutils -ALLOW maps/libs/locale/compatibility -> maps/libs/deprecated/localeutils -ALLOW maps/libs/road_graph -> maps/libs/deprecated/localeutils -ALLOW maps/poi/personalized_poi -> maps/libs/deprecated/localeutils -ALLOW maps/renderer -> maps/libs/deprecated/localeutils -ALLOW maps/routing/router -> maps/libs/deprecated/localeutils -ALLOW maps/routing/graph-tile-builder -> maps/libs/deprecated/localeutils -ALLOW maps/snippets/tools/masstransit -> maps/libs/deprecated/localeutils -ALLOW maps/tools/indoor -> maps/libs/deprecated/localeutils -ALLOW maps/wikimap/mapspro/services/mrc -> maps/libs/deprecated/localeutils -ALLOW netsys/tiles-vcdiff/gen-tiles -> maps/libs/deprecated/localeutils +# Use maps/libs/locale instead +ALLOW maps/automotive/remote_access/libs/i18n -> maps/libs/deprecated/localeutils +ALLOW maps/carparks/renderer/datasource -> maps/libs/deprecated/localeutils +ALLOW maps/fastcgi/tilerenderer-serv -> maps/libs/deprecated/localeutils +ALLOW maps/garden/modules/renderer_denormalization -> maps/libs/deprecated/localeutils +ALLOW maps/infopoint -> maps/libs/deprecated/localeutils +ALLOW maps/jams/renderer2 -> maps/libs/deprecated/localeutils +ALLOW maps/libs/i18n -> maps/libs/deprecated/localeutils +ALLOW maps/libs/i18n-geobase -> maps/libs/deprecated/localeutils +ALLOW maps/libs/jams/static-graph -> maps/libs/deprecated/localeutils +ALLOW maps/libs/locale/compatibility -> maps/libs/deprecated/localeutils +ALLOW maps/libs/road_graph -> maps/libs/deprecated/localeutils +ALLOW maps/poi/personalized_poi -> maps/libs/deprecated/localeutils +ALLOW maps/renderer -> maps/libs/deprecated/localeutils +ALLOW maps/routing/router -> maps/libs/deprecated/localeutils +ALLOW maps/routing/graph-tile-builder -> maps/libs/deprecated/localeutils +ALLOW maps/snippets/tools/masstransit -> maps/libs/deprecated/localeutils +ALLOW maps/tools/indoor -> maps/libs/deprecated/localeutils +ALLOW maps/wikimap/mapspro/services/mrc -> maps/libs/deprecated/localeutils +ALLOW netsys/tiles-vcdiff/gen-tiles -> maps/libs/deprecated/localeutils + +# Use maps/libs/geolib instead +ALLOW maps/streetview/backoffice/lib -> maps/libs/deprecated/coordtrans_pymod -# Use maps/libs/geolib instead -ALLOW maps/streetview/backoffice/lib -> maps/libs/deprecated/coordtrans_pymod - # Use std::chrono or util/datetime instead ALLOW maps/analyzer -> maps/libs/deprecated/boost_time ALLOW maps/routing -> maps/libs/deprecated/boost_time ALLOW maps/tools/naviguide/lib -> maps/libs/deprecated/boost_time # Stop spreading deprecated stuff -ALLOW maps/libs/deprecated -> maps/libs/deprecated +ALLOW maps/libs/deprecated -> maps/libs/deprecated DENY .* -> maps/libs/deprecated # maps/doc/proto holds proto interface for maps backends. Anyone can use them. @@ -44,7 +44,7 @@ ALLOW .* -> maps/doc/proto # These libraries are allowed for general use ALLOW .* -> maps/libs/common ALLOW .* -> maps/libs/csv -ALLOW .* -> maps/libs/enum_io +ALLOW .* -> maps/libs/enum_io ALLOW .* -> maps/libs/geolib ALLOW .* -> maps/libs/http ALLOW .* -> maps/libs/json @@ -57,7 +57,7 @@ ALLOW .* -> maps/libs/sql_chemistry ALLOW .* -> maps/libs/st ALLOW .* -> maps/libs/tile ALLOW .* -> maps/libs/ttl_cache -ALLOW .* -> maps/pylibs/local_postgres +ALLOW .* -> maps/pylibs/local_postgres # Fix current PEERDIRs and prevent any further growth ALLOW media/road-graph-tool -> maps/libs/road_graph @@ -156,12 +156,12 @@ ALLOW sandbox/projects/masstransit -> maps/ ALLOW sprav/altay/panorama -> maps/streetview/libs ALLOW yql/udfs/maps -> maps/ -# maps_adv will be split into maps and smb -ALLOW maps_adv/ -> maps/ -ALLOW maps_adv/ -> maps_adv/ -ALLOW smb/ -> maps_adv/ -DENY .* -> maps_adv/ - +# maps_adv will be split into maps and smb +ALLOW maps_adv/ -> maps/ +ALLOW maps_adv/ -> maps_adv/ +ALLOW smb/ -> maps_adv/ +DENY .* -> maps_adv/ + ALLOW sdg/library/python/revision_manager -> maps/wikimap/mapspro/libs/common ALLOW sdg/library/python/revision_manager -> maps/wikimap/mapspro/libs/revision @@ -172,8 +172,8 @@ ALLOW ydo/libs/dispatch -> maps/libs/kdtree # use of privacy_detector ALLOW toloka -> maps/wikimap/mapspro/services/mrc/libs/ -# allow using yacare to implement piglet sync service -ALLOW devtools/contrib -> maps/infra/yacare - +# allow using yacare to implement piglet sync service +ALLOW devtools/contrib -> maps/infra/yacare + # Do not allow PEERDIRs into maps unless such PEERDIRs have be explicitly allowed above DENY .* -> maps/ |