[pkg-apparmor] Bug#918548: About possibility to translate AppArmor tunables

Stephen J. Turnbull turnbull.stephen.fw at u.tsukuba.ac.jp
Tue Jan 8 07:26:46 GMT 2019


Ian Jackson writes:
 > Package: apparmor
 > Version: 2.13.2-3
 > Severity: serious
 > 
 > Vincas, thanks for reporting this bug on the debian-i18n list.
 > I think it needs a much higher profile.
 > 
 > Vincas Dargis writes ("About possibility to translate AppArmor tunables"):
 > > Let's look at one tunable file example. Currently, Debian and
 > > upstream version of `/etc/apparmor.d/tunables/xdg-user-dirs`

That's OK for defaults, but it should be tunable per user.

 > > (from apparmor package) have these contents:
 > > 
 > > ```
 > > @{XDG_DESKTOP_DIR}="Desktop"
 > ...
 > > The problem is that on my machine, "Desktop" is actually "Darbastalis",
 > 
 > I think you mean "in your account" ?  I mean, if you had several users
 > who used different languages, wouldn't their "Desktop" directory be
 > called different things ?

I should think so.

For this reason, this really should be dealt with in XDG, and I think
a variation on the /etc/alternatives model would be appropriate.  That
is, the "real directory" is something like ~/.local/Desktop, and 
~/Darbastalis is a link to that.  (Or it could be the other way around,
for all I care! ;-)

Obviously this is a long-run (maybe never) solution, so I don't
propose that apparmor devs ignore this if it can be ameliorated with
reasonable effort in apparmor.

Steve



More information about the pkg-apparmor-team mailing list