[Bug 1918696] Re: libseccomp 2.5.1 will break unit tests on ppc
Launchpad Bug Tracker
1918696 at bugs.launchpad.net
Tue Apr 6 19:24:20 UTC 2021
This bug was fixed in the package systemd - 246.6-1ubuntu1.3
---------------
systemd (246.6-1ubuntu1.3) groovy; urgency=medium
* d/p/lp1918696-shared-seccomp-util-address-family-filtering-is-brok.patch:
Stop attempting to restrict address families on ppc archs
(LP: #1918696)
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=34d1b2b4f4fdc349da37a07fe98418456167592a
* d/p/lp1915887-Downgrade-a-couple-of-warnings-to-debug.patch:
Downgrade some log messages so they stop spamming logs
(LP: #1915887)
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d092e70912009daf6f64182d86b3d92aed28722a
* d/p/lp1887744-basic-unit-file-when-loading-linked-unit-files-use-l.patch:
Use src name, not dst name, of symlinked unit files (LP: #1887744)
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1e42633ccecc9c9157b19387c11ac1bf7ea7d161
-- Dan Streetman <ddstreet at canonical.com> Wed, 10 Mar 2021 16:03:13
-0500
** Changed in: systemd (Ubuntu Groovy)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1918696
Title:
libseccomp 2.5.1 will break unit tests on ppc
Status in systemd package in Ubuntu:
Fix Released
Status in systemd source package in Bionic:
Fix Committed
Status in systemd source package in Focal:
Fix Released
Status in systemd source package in Groovy:
Fix Released
Bug description:
[impact]
when libseccomp is upgraded to 2.5.1 on all releases, the systemd
seccomp unit tests will start failing on ppc, as
RestrictAddressFamilies= will no longer work on that arch.
However, the systemd.exec man page has stated that
RestrictAddressFamiles= doesn't work on ppc since before bionic.
[test case]
check systemd autopkgtest on ppc, looking at the
test_restrict_access_familes unit test
[regression potential]
any regression would involve the use of RestrictAddressFamilies=,
either no longer restricting or incorrectly restricting address
familes.
[scope]
this is needed for b/f/g
this was fixed upstream by commit
d5923e38bc0e6cf9d7620ed5f1f8606fe7fe1168 which is included in 247, so
this is fixed in h already
This isn't needed in x, because it doesn't include upstream commit
469830d1426a91e0897c321fdc8ee428f0a750c1 which reworked the code to
switch from seccomp_rule_add to seccomp_rule_add_exact, so systemd
could handle lack of arch support itself, instead of allowing the 'not
exact' seccomp syscall to just ignore the call due to lack of arch
support.
[other info]
libseccomp will be updated to 2.5.1 in the near future so this is
needed before that update
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1918696/+subscriptions
More information about the foundations-bugs
mailing list