Merge pull request 'fix: sysctl audit via procfs' (#14) from fix/sysctl-procfs-fallback into main

app.py

@@ -1209,15 +1209,15 @@ SYSCTL_AUDIT_KEYS = (
 
 
 def _sysctl_audit_command() -> str:
-    script = f'''import glob, json, subprocess
+    script = f'''import glob, json
+from pathlib import Path
 keys = {SYSCTL_AUDIT_KEYS!r}
 live, errors = {{}}, {{}}
 for key in keys:
-    result = subprocess.run(["sysctl", "-n", key], capture_output=True, text=True)
+    try:
-    if result.returncode == 0:
+        live[key] = Path("/proc/sys/" + key.replace(".", "/")).read_text().strip()
-        live[key] = result.stdout.strip()
+    except OSError as exc:
-    else:
+        errors[key] = str(exc)[:160]
-        errors[key] = result.stderr.strip()[:160]
 persistent = {{}}
 for path in ["/etc/sysctl.conf", *sorted(glob.glob("/etc/sysctl.d/*.conf"))]:
     try: