#!/bin/sh
set -eu

profile_source=/usr/share/apparmor/extra-profiles/bwrap-userns-restrict
profile_target=/etc/apparmor.d/bwrap-userns-restrict
profile_marker=/var/lib/afi/bwrap-profile-owned

[ "${1:-}" = purge ] || exit 0

if [ -f "$profile_marker" ] \
    && [ -L "$profile_target" ] \
    && [ "$(readlink "$profile_target")" = "$profile_source" ]; then
    /usr/sbin/apparmor_parser -R "$profile_target" >/dev/null 2>&1 || true
    rm -f "$profile_target"
fi
rm -f "$profile_marker"
rmdir /var/lib/afi 2>/dev/null || true
