Edit: /etc/apparmor.d/sbuild-unhold (360B)
# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"
abi
,
include
profile sbuild-unhold /usr/bin/sbuild-unhold flags=(unconfined) {
userns,
# Site-specific additions and overrides. See local/README for details.
include if exists
}