The text 77d586f9cccd, as Debian 11 (Bullseye) shipped it.
split the confinement context into a label and mode
aa_splitcon(3) on Linux now