
# vim: ft=apparmor
## #!/usr/bin/ruby
##
## puts "Hello world"
##
## with ln -sf /usr/bin/alts /usr/bin/ruby
## abi <abi/4.0>,
## 
## include <tunables/global>
## 
## profile test-salts /root/bin/test-alts {
##   include <abstractions/alts>  
## 
##   # not sure why. maybe because I run in a nspawn container?
##   capability dac_read_search,
##   capability dac_override,
## 
##   /usr/bin/ruby.ruby4.0 cx -> actual_script,
## 
##   profile actual_script {
##     include <abstractions/base>
##     include <abstractions/ruby>
##     /usr/bin/ruby.ruby4.0 rm,
##     /root/bin/test-alts r,
##   }
## }

include <abstractions/base>

/{,usr/}bin/alts rm,

/usr/share/libalternatives/ r,
/usr/share/libalternatives/*/ r,
/usr/share/libalternatives/*/*.conf r,
# system override
/etc/libalternatives.conf r,
# user override
owner @{HOME}/.config/libalternatives.conf r,
