Comment 4 for bug 1967884

18 months later, I'm still seeing this (perfmon and net_admin). As a workaround, could snapd not use /var/lib/snapd/apparmor/snap-confine.internal?

This is also mentioned here:
https://forum.snapcraft.io/t/apparmor-denied-capability-net-admin-and-perfmon/33068