Package: apt
Version: 2.9.19
Severity: normal
X-Debbugs-Cc: [email protected]


Dear Maintainer,

I'm not sure which (recent) version of apt caused this (though reading the 
changelog
makes me suspicious of 2.9.19), but as of this version, I cannot use the seccomp
sandbox with any https transport repositories: I get error:

**** Seccomp prevented execution of syscall 0000000217 on architecture amd64 
****

which is (expectedly) resolved by allowing getdents64 in the seccomp filter:

APT::Sandbox::Seccomp::allow { "getdents64" };

Presumably this is some OpenSSL/GnuTLS difference?

I can reproduce this easily by just changing the deb.debian.org URL to https and
turning on the seccomp filter.  I can poke harder at making a reproducer if the
above doesn't reproduce for you.

Best,
Antonio


Attachment: OpenPGP_0x72DB026E04C1C768.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to