Bug#879662:

Hello,

TL:DR ; nanosleep.

I've upgraded to apt 1.6~alpha2 (amd64)and I'm now getting the following error message.

[21:02] <nicodache@tcherepnin> ~ $ sudo apt-get update
[sudo] Mot de passe de nicodache :
Réception de:1 http://ftp.belnet.be/debian sid InRelease [235 kB]
0% [1 InRelease 2.679 B/235 kB 1%] [Connexion à deb.opera.com (185.26.183.130)]
**** Seccomp prevented execution of syscall 0000000035 on architecture amd64 ****

Lecture des listes de paquets... Fait
E: Method http has died unexpectedly!
E: Le sous-processus http a renvoyé un code d'erreur (31)

I've had a look at files https://people.debian.org/~jak/syscalls-trapped.txt, https://people.debian.org/~jak/syscalls-allowed.txt, and man syscalls, but didn't find anything called 0000000035 in there...

I've tried to add it into /etc/apt/apt.conf (I just added

APT::Sandbox::Seccomp::Allow { "0000000035";};

to it).

This yields

0% [En cours]EE: : Cannot allow 0000000035: Argument invalide - aptMethod::Configuration (0: Succès)
Cannot allow 0000000035: Argument invalide - aptMethod::Configuration (0: Succès)
Lecture des listes de paquets... Fait
E: Method https has died unexpectedly!
E: Le sous-processus https a renvoyé un code d'erreur (100)

I foolishly looked at man 2 syscalls, and using dec/octal/hexa numbering, tried all the relative syscalls I found in the list presented there, in the order given by the man page (that is, chroot clone delete_module epoll_wait fallocate fgetxattr).

Then I got smarter, and I found arch/x86/entry/syscalls/syscall_64.tbl, which is in a format which made much more sense to me.

[21:44] <nicodache@tcherepnin> /tmp/linux-4.13.10 $ grep ^35 arch/x86/entry/syscalls/syscall_64.tbl

35 common nanosleep sys_nanosleep

And that now works as expected *\o/*

So you may want to add nanosleep, and maybe also clock_nanosleep to the default APT seccomp config.

Cheers (and thanks for that ~alpha2 modifications).

-- N