<p>Literally. This works:</p>
<div class="highlight highlight-source-shell"><pre>$ sudo strace -qqu <span class="pl-smi">$USER</span> -e trace=execve -e signal=none -- sudo <span class="pl-c1">true</span>

execve(<span class="pl-s"><span class="pl-pds">"</span>/usr/bin/sudo<span class="pl-pds">"</span></span>, [<span class="pl-s"><span class="pl-pds">"</span>sudo<span class="pl-pds">"</span></span>, <span class="pl-s"><span class="pl-pds">"</span>true<span class="pl-pds">"</span></span>], 0x7ffe1fc6b730 /<span class="pl-k">*</span> 13 vars <span class="pl-k">*</span>/) = 0</pre></div>
<p>And this not:</p>
<div class="highlight highlight-source-shell"><pre>$ sudo strace --seccomp-bpf -fqqu <span class="pl-smi">$USER</span> -e trace=execve -e signal=none -- sudo <span class="pl-c1">true</span>

execve(<span class="pl-s"><span class="pl-pds">"</span>/usr/bin/sudo<span class="pl-pds">"</span></span>, [<span class="pl-s"><span class="pl-pds">"</span>sudo<span class="pl-pds">"</span></span>, <span class="pl-s"><span class="pl-pds">"</span>true<span class="pl-pds">"</span></span>], 0x7ffc693481d8 /<span class="pl-k">*</span> 13 vars <span class="pl-k">*</span>/) = 0
sudo: effective uid is not 0, is /usr/bin/sudo on a file system with the <span class="pl-s"><span class="pl-pds">'</span>nosuid<span class="pl-pds">'</span></span> option <span class="pl-c1">set</span> or an NFS file system without root privileges<span class="pl-k">?</span>
</pre></div>
<p>Is it temporary regression or <code>--seccomp-bpf</code> is fundamentally impossible for this usecase?</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/strace/strace/issues/126?email_source=notifications&email_token=AAFX7DG4DOCV7LDGSFOCG7TREUCPLA5CNFSM4K3G2HG2YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4IQBPWPQ">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AAFX7DFFHSJ4554T6S45NVTREUCPLANCNFSM4K3G2HGQ">unsubscribe</a>.<img src="https://github.com/notifications/beacon/AAFX7DAMW44DMDC6LJUK5PTREUCPLA5CNFSM4K3G2HG2YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4IQBPWPQ.gif" height="1" width="1" alt="" /></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/strace/strace/issues/126?email_source=notifications\u0026email_token=AAFX7DG4DOCV7LDGSFOCG7TREUCPLA5CNFSM4K3G2HG2YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4IQBPWPQ",
"url": "https://github.com/strace/strace/issues/126?email_source=notifications\u0026email_token=AAFX7DG4DOCV7LDGSFOCG7TREUCPLA5CNFSM4K3G2HG2YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4IQBPWPQ",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>