diff options
author | Julian Andres Klode <julian.klode@canonical.com> | 2018-04-06 13:53:20 +0200 |
---|---|---|
committer | Julian Andres Klode <julian.klode@canonical.com> | 2018-04-06 14:17:26 +0200 |
commit | e688a4f4890c04021468932e57e17891853c8443 (patch) | |
tree | 5cfa47513e4e2e625f38694ab9cb97e25461c93b | |
parent | dd1678abe281592ab63978804791c193d5c9dcbf (diff) |
Turn off seccomp sandboxing by default
LP: #1732030
Closes: #890489
Fixes meefik/linuxdeploy#869
-rw-r--r-- | debian/NEWS | 8 | ||||
-rw-r--r-- | methods/aptmethod.h | 2 |
2 files changed, 9 insertions, 1 deletions
diff --git a/debian/NEWS b/debian/NEWS index ab49c6d34..bf4ec8066 100644 --- a/debian/NEWS +++ b/debian/NEWS @@ -1,3 +1,11 @@ +apt (1.6~rc1) UNRELEASED; urgency=medium + + Seccomp sandboxing has been turned off by default for now. If it works + for you, you are encouraged to reenable it by setting APT::Sandbox::Seccomp + to true. + + -- Julian Andres Klode <jak@debian.org> Fri, 06 Apr 2018 14:14:29 +0200 + apt (1.6~beta1) unstable; urgency=medium APT now verifies that the date of Release files is not in the future. By diff --git a/methods/aptmethod.h b/methods/aptmethod.h index 331411571..10ff1b57f 100644 --- a/methods/aptmethod.h +++ b/methods/aptmethod.h @@ -106,7 +106,7 @@ protected: if (SeccompFlags == 0) return true; - if (_config->FindB("APT::Sandbox::Seccomp", true) == false) + if (_config->FindB("APT::Sandbox::Seccomp", false) == false) return true; if (RunningInQemu() == true) |