mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 01:57:43 +00:00
The install of the polkit action files for aa-notify leaks build root information. From OBS apparmor-utils.noarch: E: file-contains-buildroot (Badness: 10000) /usr/share/polkit-1/actions/com.ubuntu.pkexec.aa-notify.policy this is present on Ubuntu as well <annotate key="org.freedesktop.policykit.exec.path">/build/apparmor-ZUzkoL/apparmor-4.1.0~beta4/debian/tmp/usr/lib/python3/dist-packages/apparmor/update_profile.py</annotate> this occurs because the {LIB_PATH} template variable is being replaced with the self.install_lib. Make sure we strip the build prefix if we are generating the files in a build environment instead of doing a direct install. Closes: https://gitlab.com/apparmor/apparmor/-/issues/486 Co-Author: Ryan Lee <ryan.lee@canonical.com> Signed-off-by: John Johansen <john.johansen@canonical.com>
Known Bugs: Will allow multiple letters in the () due to translation/unicode issues with regexing the key. User input will probably bug out in a different locale.