http://tstzmgqansvqfzr3qrkehszmlhjqbpqp7pwncrzr72ohyygrnbuu26qd.onion/git/apparmor.d/commit/4ab737502cffb1b426a36655f669f06ba4cb1c6c.html
                                
                                
                                                                            'r' shouldn't +  # be required but applications fail without it. journald doesn't leak +  # anything when reading so this is ok. +  @{run}/systemd/journal/stdout  rw, + +  /usr/lib{,32,64}/locale/**             mr, +  /usr/lib{,32,64}/gconv/*.so            mr, +  /usr/lib{,32,64}/gconv/gconv-modules*  mr, +  /usr/lib/@{multiarch}/gconv/*.so           mr, +  /usr/lib/@{multiarch}/gconv/gconv-modules* mr, + +  # used by glibc when binding to ephemeral ports +  @{etc_ro}/bindresvport.blacklist    r, + +  #...