I agree that dpkg-divert is a good way also, just that in my experience it is easier to use alternatives for many teams as fpm requires less institutional knowl

I agree that dpkg-divert is a good way also, just that in my experience it is easier to use alternatives for many teams as fpm requires less institutional knowledge. Point being is that at least in my opinion, using the audit system is the hard way especially in a container heavy world and due to the system wide performance impacts of open/close system calls. While there are lots of politics and exceptions with heir(7), those packages should use a link in /usr and not a Host-specific link in a /etc subdirectory. But yes we mostly agree, my problem was with the audit framework which is fragile and expensive.