Create the bwrap file:
sudo tee /etc/apparmor.d/bwrap > /dev/null <<EOF
abi <abi/4.0>,
include <tunables/global>
profile bwrap /usr/bin/bwrap flags=(unconfined) {
userns,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/bwrap>
}
EOF
Restart the AppArmor service:
sudo systemctl reload apparmor