Package: apt
Version: 2.9.19
Severity: normal
X-Debbugs-Cc: aerusso@aerusso.net
Dear Maintainer,
I'm not sure which (recent) version of apt caused this (though reading the changelog
makes me suspicious of 2.9.19), but as of this version, I cannot use the seccomp
sandbox with any https transport repositories: I get error:
**** Seccomp prevented execution of syscall 0000000217 on architecture amd64 ****
which is (expectedly) resolved by allowing getdents64 in the seccomp filter:
APT::Sandbox::Seccomp::allow { "getdents64" };
Presumably this is some OpenSSL/GnuTLS difference?
I can reproduce this easily by just changing the deb.debian.org URL to https and
turning on the seccomp filter. I can poke harder at making a reproducer if the
above doesn't reproduce for you.
Best,
Antonio
Attachment:
OpenPGP_0x72DB026E04C1C768.asc
Description: OpenPGP public key
Attachment:
OpenPGP_signature.asc
Description: OpenPGP digital signature