From cf1a98baa58360a56f38cc3d5ce01905f6ebc8f4 Mon Sep 17 00:00:00 2001 From: Julian Andres Klode Date: Wed, 25 Oct 2017 21:38:31 +0200 Subject: methods: Enable additional syscalls (SYSV IPC) in fakeroot If FAKED_MODE is set, enable SYSV IPC so we don't crash when running in fakeroot. Closes: #879662 --- methods/aptmethod.h | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'methods') diff --git a/methods/aptmethod.h b/methods/aptmethod.h index 5616ad824..bb24463c7 100644 --- a/methods/aptmethod.h +++ b/methods/aptmethod.h @@ -245,6 +245,16 @@ protected: ALLOW(getdents64); } + if (getenv("FAKED_MODE")) + { + ALLOW(semop); + ALLOW(semget); + ALLOW(msgsnd); + ALLOW(msgrcv); + ALLOW(msgget); + ALLOW(msgctl); + } + for (auto &custom : _config->FindVector("APT::Sandbox::Seccomp::Allow")) { if ((rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, seccomp_syscall_resolve_name(custom.c_str()), 0))) -- cgit v1.2.3