feat(profile): add more programs to the list of sbin program.

apparmor.d/profiles-m-r/monitorix

@@ -41,7 +41,7 @@ profile monitorix @{exec_path} {
   @{bin}/tail               rix,
   @{bin}/{m,g,}awk          rix,
   @{bin}/free               rix,
-  @{bin}/ss                 rix,
+  @{sbin}/ss                rix,
   @{bin}/who                rix,
   @{sbin}/lvm               rix,
   @{sbin}/xtables-nft-multi rix,

apparmor.d/profiles-m-r/os-prober

@@ -27,10 +27,10 @@ profile os-prober @{exec_path} flags=(attach_disconnected) {
   @{sh_path}               rix,
   @{bin}/{e,f,}grep        rix,
   @{sbin}/blkid            rPx,
-  @{bin}/btrfs             rPx,
+  @{sbin}/btrfs            rPx,
   @{bin}/cat               rix,
   @{bin}/cut               rix,
-  @{bin}/dmraid           rPUx,
+  @{sbin}/dmraid           rPUx,
   @{bin}/find              rix,
   @{bin}/grub-mount        rPx,
   @{sbin}/grub-probe       rPx,

apparmor.d/profiles-m-r/packagekitd

@@ -63,7 +63,7 @@ profile packagekitd @{exec_path} flags=(attach_disconnected) {
   @{bin}/dpkg                        rPx -> child-dpkg, #aa:only apt
   @{bin}/fc-cache                    rPx,
   @{bin}/glib-compile-schemas        rPx,
-  @{bin}/install-info                rPx,
+  @{sbin}/install-info               rPx,
   @{bin}/rpm                        rPUx, #aa:only opensuse
   @{bin}/rpmdb2solv                 rPUx, #aa:only opensuse
   @{bin}/systemd-inhibit             rPx,

apparmor.d/profiles-m-r/rngd

@@ -7,7 +7,7 @@ abi <abi/4.0>,
 
 include <tunables/global>
 
-@{exec_path} = @{bin}/rngd
+@{exec_path} = @{sbin}/rngd
 profile rngd @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/devices-usb>