1 |
commit: 45c610a03a0686bb89dbea1f45018aa1cd034612 |
2 |
Author: Sam James <sam <AT> gentoo <DOT> org> |
3 |
AuthorDate: Sat Dec 31 14:52:18 2022 +0000 |
4 |
Commit: Sam James <sam <AT> gentoo <DOT> org> |
5 |
CommitDate: Sat Dec 31 14:53:20 2022 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=45c610a0 |
7 |
|
8 |
profiles/base: mask sys-apps/pax-utils[seccomp] |
9 |
|
10 |
As noted in mask message, this is far too risky for new libcs/newer versions |
11 |
of libc/sandbox changes and it leads to Portage generating invalid metadata. |
12 |
|
13 |
Portage does warn on it right now though, at least. |
14 |
|
15 |
Bug: https://bugs.gentoo.org/815877 |
16 |
Signed-off-by: Sam James <sam <AT> gentoo.org> |
17 |
|
18 |
profiles/base/package.use.mask | 5 +++++ |
19 |
1 file changed, 5 insertions(+) |
20 |
|
21 |
diff --git a/profiles/base/package.use.mask b/profiles/base/package.use.mask |
22 |
index 26983de4b5a7..9bc955e09478 100644 |
23 |
--- a/profiles/base/package.use.mask |
24 |
+++ b/profiles/base/package.use.mask |
25 |
@@ -6,6 +6,11 @@ |
26 |
# This file is only for generic masks. For arch-specific masks (i.e. |
27 |
# mask everywhere, unmask on arch/*) use arch/base. |
28 |
|
29 |
+# Sam James <sam@g.o> (2022-12-31) |
30 |
+# seccomp cannot be disabled via a runtime toggle which introduces substantial |
31 |
+# fragility to Portage which relies on pax-utils' scanelf heavily. bug #815877. |
32 |
+app-misc/pax-utils seccomp |
33 |
+ |
34 |
# Sam James <sam@g.o> (2022-12-29) |
35 |
# Needs yet-unpackaged libxmlpp-5.0, bug #888898 |
36 |
www-client/elinks javascript |