[Pkg-libvirt-commits] [Git][libvirt-team/libvirt][debian/latest] libnss-libvirt: Update apt seccomp filter

[Andrea Bolognani (@abologna)]

Andrea Bolognani pushed to branch debian/latest at Libvirt Packaging Team / libvirt


Commits:
60b2ca1f by Smits Katze at 2022-12-21T02:12:24+01:00
libnss-libvirt: Update apt seccomp filter

Installing libnss-libvirt and enabling it in nsswitch.conf causes the
apt http method to issue getdents and getdents64 syscalls, which are not
whitelisted in its seccomp filter. This makes apt unusable for the most
part, and it breaks unattended-upgrades in particular.

/etc/apt/apt.conf.d/90libnss-libvirt already creates an exception for
getdents syscalls. Update that file in order to allow getdents64
syscalls as well.

Closes: #934474

Suggested-by: Thomas Luzat <thomas at luzat.com>
Signed-off-by: Smits Katze <smitsohu at gmail.com>

- - - - -


1 changed file:

- debian/apt/90libnss-libvirt


Changes:

=====================================
debian/apt/90libnss-libvirt
=====================================
@@ -1,2 +1,2 @@
-// the nss module (once enabled) will make apt call getdents (LP: #1732030)
-apt::sandbox::seccomp::allow { "getdents" };
+// the nss module (once enabled) will make apt call getdents and getdents64 (#934474 and LP: #1732030)
+apt::sandbox::seccomp::allow { "getdents", "getdents64" };



View it on GitLab: https://salsa.debian.org/libvirt-team/libvirt/-/commit/60b2ca1fe00561b5875db9794406e56c8464e54d

-- 
View it on GitLab: https://salsa.debian.org/libvirt-team/libvirt/-/commit/60b2ca1fe00561b5875db9794406e56c8464e54d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-libvirt-commits/attachments/20221222/18282012/attachment.htm>