fix(profile): small improvment raised by the tests.

apparmor.d/profiles-s-z/unhide-tcp

@@ -22,7 +22,7 @@ profile unhide-tcp @{exec_path} {
   @{bin}/fuser      rix,
   @{bin}/netstat    rix,
   @{bin}/sed        rix,
-  @{bin}/ss         rix,
+  @{sbin}/ss        rix,
 
   @{PROC}/@{pids}/net/tcp{,6} r,
   @{PROC}/@{pids}/net/udp{,6} r,

apparmor.d/profiles-s-z/which

@@ -17,7 +17,9 @@ profile which @{exec_path} flags=(attach_disconnected) {
   @{sh_path}         rix,
 
   @{bin}/ r,
+  @{sbin}/ r,
   @{bin}/**/ r,
+  @{sbin}/**/ r,
   @{lib}/ r,
   @{lib}/**/ r,
   /opt/**/bin/ r,