mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 22:35:35 +00:00
Code Issues Releases Wiki Activity

Replace 'sanitise the environment' wording in aa.py ask_rule_questions

Browse Source 
Signed-off-by: Ryan Lee <ryan.lee@canonical.com>
This commit is contained in:
Ryan Lee
2024-08-28 13:39:52 -07:00
parent 65c84071bb
commit 8865ff69d8
1 changed files with 11 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
utils/apparmor/aa.py
View File

@@ -871,20 +871,22 @@ def ask_exec(hashlog):
elif ans in ('CMD_px', 'CMD_cx', 'CMD_pix', 'CMD_cix'): elif ans in ('CMD_px', 'CMD_cx', 'CMD_pix', 'CMD_cix'):
exec_mode = ans.replace('CMD_', '') exec_mode = ans.replace('CMD_', '')
px_msg = _( px_msg = _(
"Should AppArmor sanitise the environment when\n" "Should AppArmor enable secure-execution mode\n"
"switching profiles?\n" "when switching profiles?\n"
"\n" "\n"
"Sanitising environment is more secure,\n" "Doing so is more secure, but some applications\n"
"but some applications depend on the presence\n" "depend on the presence of LD_PRELOAD or\n"
"of LD_PRELOAD or LD_LIBRARY_PATH.") "LD_LIBRARY_PATH, which would be sanitized by\n"
"enabling secure-execution mode.")
if parent_uses_ld_xxx: if parent_uses_ld_xxx:
px_msg = _( px_msg = _(
"Should AppArmor sanitise the environment when\n" "Should AppArmor enable secure-execution mode\n"
"switching profiles?\n" "when switching profiles?\n"
"\n" "\n"
"Sanitising environment is more secure,\n" "Doing so is more secure,\n"
"but this application appears to be using LD_PRELOAD\n" "but this application appears to be using LD_PRELOAD\n"
"or LD_LIBRARY_PATH and sanitising the environment\n" "or LD_LIBRARY_PATH, and sanitising those environment\n"
"variables by enabling secure-execution mode\n"
"could cause functionality problems.") "could cause functionality problems.")
ynans = aaui.UI_YesNo(px_msg, 'y') ynans = aaui.UI_YesNo(px_msg, 'y')