> I think ideally > this would be using a system pathname and be part of a package that gets > then listed in the .buildinfo files.
This is how openSUSE does it as well, e.g with https://github.com/openSUSE/post-build-checks/ and https://github.com/openSUSE/brp-check-suse/ that get pulled into the build as versioned packages. If you think, that a package with 1 line is overkill, maybe you could add it to another build-only package as /usr/sbin/policy-rc.d ?