The text 5ccc6e27faf7, as Debian 13 (Trixie) shipped it.
combine multiple profiles to confine a task
aa_stack_profile(2) on Linux now