# sudoRole user1
user1 ALL = ROLE=foo_r TYPE=bar_t ALL

# sudoRole user2
user2 ALL = APPARMOR_PROFILE=usr.bin.tcpdump /usr/bin/tcpdump

# sudoRole user3
user3 ALL =\
    PRIVS="file_link_any,net_access,proc_exec,proc_fork,proc_info,proc_session"\
    LIMITPRIVS="default" ALL
