build: add RBAC filter to the only/exclude directive.

pkg/prebuild/cli/cli.go

@@ -80,6 +80,7 @@ func Configure() {
 	if full && paths.New("apparmor.d/groups/_full").Exist() {
 		prepare.Register("fsp")
 		builder.Register("fsp")
+		prebuild.RBAC = true
 	} else if prebuild.SystemdDir.Exist() {
 		prepare.Register("systemd-early")
 	}

pkg/prebuild/directive/filter.go

@@ -39,6 +39,10 @@ func init() {
 }
 
 func filterRuleForUs(opt *Option) bool {
+	if prebuild.RBAC && slices.Contains(opt.ArgList, "RBAC") {
+		return true
+	}
+
 	abiStr := fmt.Sprintf("abi%d", prebuild.ABI)
 	if slices.Contains(opt.ArgList, abiStr) {
 		return true

pkg/prebuild/directories.go

@@ -13,6 +13,9 @@ var (
 	// AppArmor version
 	Version = 4.0
 
+	// Either or not RBAC is enabled
+	RBAC = false
+
 	// Pkgname is the name of the package
 	Pkgname = "apparmor.d"