From e688a4f4890c04021468932e57e17891853c8443 Mon Sep 17 00:00:00 2001 From: Julian Andres Klode Date: Fri, 6 Apr 2018 13:53:20 +0200 Subject: Turn off seccomp sandboxing by default LP: #1732030 Closes: #890489 Fixes meefik/linuxdeploy#869 --- debian/NEWS | 8 ++++++++ methods/aptmethod.h | 2 +- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/debian/NEWS b/debian/NEWS index ab49c6d34..bf4ec8066 100644 --- a/debian/NEWS +++ b/debian/NEWS @@ -1,3 +1,11 @@ +apt (1.6~rc1) UNRELEASED; urgency=medium + + Seccomp sandboxing has been turned off by default for now. If it works + for you, you are encouraged to reenable it by setting APT::Sandbox::Seccomp + to true. + + -- Julian Andres Klode Fri, 06 Apr 2018 14:14:29 +0200 + apt (1.6~beta1) unstable; urgency=medium APT now verifies that the date of Release files is not in the future. By diff --git a/methods/aptmethod.h b/methods/aptmethod.h index 331411571..10ff1b57f 100644 --- a/methods/aptmethod.h +++ b/methods/aptmethod.h @@ -106,7 +106,7 @@ protected: if (SeccompFlags == 0) return true; - if (_config->FindB("APT::Sandbox::Seccomp", true) == false) + if (_config->FindB("APT::Sandbox::Seccomp", false) == false) return true; if (RunningInQemu() == true) -- cgit v1.2.3