[Pkg-libvirt-commits] [libvirt] 03/04: Avoid apt seccomp issues due to libnss-libvirt

[Guido Guenther]

This is an automated email from the git hooks/post-receive script.

agx pushed a commit to annotated tag debian/4.0.0_rc1-1
in repository libvirt.

commit 0cd10ab3209ccb9aef91c7482d5212595108f8a5
Author: Christian Ehrhardt <christian.ehrhardt at canonical.com>
Date:   Thu Dec 14 14:03:07 2017 +0100

    Avoid apt seccomp issues due to libnss-libvirt
    
    libnss-libvirt once enabled and with an existing guest causes apt to call
    getdents (via apt -> nss -> libnss-libvirt).
    which in the now seccomp enabled apt breaks almost everything related to apt.
    Avoid this being an issue by dropping an apt conf that allows this as
    suggested by Julian Andreas Klode (LP: #1732030).
    
    Signed-off-by: Christian Ehrhardt <christian.ehrhardt at canonical.com>
---
 debian/90libnss-libvirt       | 2 ++
 debian/libnss-libvirt.install | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/debian/90libnss-libvirt b/debian/90libnss-libvirt
new file mode 100644
index 0000000..6a4075c
--- /dev/null
+++ b/debian/90libnss-libvirt
@@ -0,0 +1,2 @@
+// the nss module (once enabled) will make apt call getdents (LP: #1732030)
+apt::sandbox::seccomp::allow { "getdents" };
diff --git a/debian/libnss-libvirt.install b/debian/libnss-libvirt.install
new file mode 100644
index 0000000..db02a9a
--- /dev/null
+++ b/debian/libnss-libvirt.install
@@ -0,0 +1,2 @@
+# the nss module (once enabled) will make apt call getdents (LP: #1732030)
+debian/90libnss-libvirt etc/apt/apt.conf.d

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-libvirt/libvirt.git