Some packages install files with wrong permissions, but sometimes we can detect and fix them.

/usr/share/man: 644

this rule matches a lot of files, mainly because it matches 444 permissions too

• packages which install manpages with 755 permissions: nvimpager, sloccount
• packages which install manpages with 444 permissions: lowdown, mdocml, dhcpcd, openresolv, all perl packages, lua5.3 (but not 5.1, 5.2 and 5.4)

/etc/apparmor.d: 600

I chose 600 because that's what aa-genprof creates.

• packages which install apparmor profiles wrong permissions: apparmor (644), brillo (640), firejail (644), mako (640) (these permission measurements may be wrong in some cases)

The package lists are not complete.

Are there any other common directories which should be included in this hook? Is forcing 644 in /usr/share/man too strict? Should affected packages be revbumped?