1. This is appending. You could also write it apt::sandbox::seccomp::allow:: "getdents" but the list notation is documented.
2. Right. Others might have other issues, mostly depending on their NSS modules. I don't think we'll fix all of them. But I don't think there are many users with non-standard NSS modules, so this maybe affects what, 1 to 5% of the users? 3. Exactly We can eventually also enable getdents in apt itself, once the methods do not need write access to partial/ anymore (because the main process then opens the file and sends it via a socket). I only disabled it for now so one method cannot find files used by other methods (except for guessing). -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apt in Ubuntu. https://bugs.launchpad.net/bugs/1732030 Title: 'apt update' dies with seccomp error Status in apt package in Ubuntu: Confirmed Status in libvirt package in Ubuntu: Confirmed Bug description: $ apt-get update 0% [Working] **** Seccomp prevented execution of syscall 0000000078 on architecture amd64 **** Reading package lists... Done E: Method mirror has died unexpectedly! E: Sub-process mirror returned an error code (31) ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: apt 1.6~alpha5 ProcVersionSignature: Ubuntu 4.13.0-16.19-generic 4.13.4 Uname: Linux 4.13.0-16-generic x86_64 NonfreeKernelModules: zfs zunicode zavl zcommon znvpair ApportVersion: 2.20.7-0ubuntu4 Architecture: amd64 Date: Mon Nov 13 23:10:57 2017 ProcEnviron: LANGUAGE=en_US:en TERM=xterm PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/zsh SourcePackage: apt UpgradeStatus: Upgraded to bionic on 2017-05-20 (177 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1732030/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
