just an example


```
rpm -qlv pipewire | grep /var/lib/pip
d---------    2 root     root                        0 Apr 17 08:56 /var/lib/pipewire
----------    1 root     root                        0 Apr 17 08:56 /var/lib/pipewire/pipewire_post_workaround
```

this then causes unneeded noise e.g. in `rpm -V pipewire`

```
rpm -V pipewire
.M.......  g /var/lib/pipewire
```

1. all %ghost entries should come with %attr()

```
%ghost %attr(0644,root,root) %config(noreplace) /etc/apparmor.d/local/%{name}
```

2. rpmlint check that errors out if the permissions bits for an entry are set to 000