feat(profile): use @{sbin} for all program inside /usr/sbin.

apparmor.d/profiles-a-f/check-support-status-hook

@@ -24,10 +24,10 @@ profile check-support-status-hook @{exec_path} {
   @{bin}/mktemp     rix,
   @{bin}/rm         rix,
 
-  @{bin}/adduser             rPx,
+  @{sbin}/adduser             rPx,
   @{bin}/check-support-status rPx,
   @{bin}/debconf-escape       rCx -> debconf-escape,
-  @{bin}/runuser             rCx -> runuser,
+  @{sbin}/runuser             rCx -> runuser,
 
   # Think what to do about this (#FIXME#)
   /usr/share/debconf/frontend      rPx,
@@ -111,7 +111,7 @@ profile check-support-status-hook @{exec_path} {
     # To write records to the kernel auditing log.
     capability audit_write,
 
-    @{bin}/runuser mr,
+    @{sbin}/runuser mr,
 
     @{sh_path}        rix,