Fixes bug 32778; bugfix on 0.4.1.1-alpha.

Peter Gerber authored Jan 05, 2020 and Peter Gerber committed Jan 05, 2020

Allow calls to dup() which was introduced in commit a22fbab9.

From a security perspective, I don't think this should impact the
security of the sandbox significantly. As far as I can tell, there
is nothing an adversary can do with a duplicated FD that can't be
done with the original.

Peter Gerber authored Jun 10, 2019 and Nick Mathewson committed Dec 17, 2019

This fixes a startup crash with libseccomp v2.4.0 if Sandbox is
set to 1.

Merge:
* libzstd-dev from ticket32242_035
* shellcheck from maint-0.4.0

Merge
* Chutney Trusty deletion in bug32240_029
* NSS addition in maint-0.3.5

Closes 32240.

We need to set "Sandbox 0", until we fix sandbox errors that are
triggered by Ubuntu Xenial and Bionic. See 32722.

Part of 32240.

"ours" to avoid version bump.

"ours" to avoid version bump.