firejail: setuid-binary usr/bin/firejail 4755 root/root
# binaries intentionally installed non-readable by upstream
firejail: executable-is-not-world-readable usr/lib/*/firejail/f* 0711
