[Bug 1732030] Re: 'apt update' dies with seccomp error

[Julian Andres Klode]

1. This is appending. You could also write it
apt::sandbox::seccomp::allow:: "getdents" but the list notation is
documented.

2. Right. Others might have other issues, mostly depending on their NSS
modules. I don't think we'll fix all of them. But I don't think there
are many users with non-standard NSS modules, so this maybe affects
what, 1 to 5% of the users?

3. Exactly

We can eventually also enable getdents in apt itself, once the methods
do not need write access to partial/ anymore (because the main process
then opens the file and sends it via a socket). I only disabled it for
now so one method cannot find files used by other methods (except for
guessing).

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1732030

Title:
  'apt update' dies with seccomp error

Status in apt package in Ubuntu:
  Confirmed
Status in libvirt package in Ubuntu:
  Confirmed

Bug description:
  $ apt-get update
  0% [Working]
   **** Seccomp prevented execution of syscall 0000000078 on architecture amd64 ****
  Reading package lists... Done
  E: Method mirror has died unexpectedly!
  E: Sub-process mirror returned an error code (31)

  ProblemType: Bug
  DistroRelease: Ubuntu 18.04
  Package: apt 1.6~alpha5
  ProcVersionSignature: Ubuntu 4.13.0-16.19-generic 4.13.4
  Uname: Linux 4.13.0-16-generic x86_64
  NonfreeKernelModules: zfs zunicode zavl zcommon znvpair
  ApportVersion: 2.20.7-0ubuntu4
  Architecture: amd64
  Date: Mon Nov 13 23:10:57 2017
  ProcEnviron:
   LANGUAGE=en_US:en
   TERM=xterm
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/zsh
  SourcePackage: apt
  UpgradeStatus: Upgraded to bionic on 2017-05-20 (177 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1732030/+subscriptions