Symlinks are always followed
When adding a rule for e.g. /bin/sh
(which is a symlink to /bin/dash
on Debian systems) then this rule will never match as the symlink is followed resulting in /bin/dash
as path to the binary. It would be nice if both, /bin/sh
and its target, could be considered.