Bug#833183: Linux 4.6.4-1: Please enable seccomp support in the kernel config on all platforms.

[Karsten Merker <merker@debian.org>]

Source: linux
Version: 4.6.4-1

Hello,

please enable CONFIG_SECCOMP on all platforms. Current systemd in
sid (231-1) appears to require seccomp support in the default
configuration for running logind:

  $ grep SystemCallFilter /lib/systemd/system/systemd-logind.service
  SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @obsolete @raw-io

On armhf I experience hangs on ssh logins with the following
entries in the system log:

  systemd[23940]: systemd-logind.service: Failed at step SECCOMP spawning /lib/systemd/systemd-logind: Invalid argument
  systemd[1]: systemd-logind.service: Main process exited, code=exited, status=228/SECCOMP

Armhf doesn't have CONFIG_SECCOMP enabled:

  $ zgrep SECCOMP /boot/config-4.6.0-1-armmp-lpae 
  CONFIG_HAVE_ARCH_SECCOMP_FILTER=y
  # CONFIG_SECCOMP is not set

>From looking the linux package sources, it looks like seccomp
isn't enabled on any arm platform:

$ rgrep -i seccomp debian/config/
debian/config/kernelarch-x86/config:CONFIG_SECCOMP=y
debian/config/sh4/config:CONFIG_SECCOMP=y
debian/config/kernelarch-powerpc/config:CONFIG_SECCOMP=y
debian/config/kernelarch-mips/config:CONFIG_SECCOMP=y
debian/config/s390x/config:CONFIG_SECCOMP=y
debian/config/kernelarch-sparc/config:CONFIG_SECCOMP=y

Regards,
Karsten
-- 
Gem. Par. 28 Abs. 4 Bundesdatenschutzgesetz widerspreche ich der Nutzung
sowie der Weitergabe meiner personenbezogenen Daten für Zwecke der
Werbung sowie der Markt- oder Meinungsforschung.