zyga@pi3-1:~$ tail -f /var/lib/snapd/{apparmor,seccomp}/profiles/snap.core.hook.configure 
==> /var/lib/snapd/apparmor/profiles/snap.core.hook.configure <==
# Allow modifying swapfile configuration for swapfile.service shipped in
# the core snap, general mgmt of the service is handled via systemctl
/etc/default/swapfile rw,

# Allow read/write access to the pi2 boot config.txt. WARNING: improperly
# editing this file may render the system unbootable.
owner /boot/uboot/config.txt rwk,
 /writable/strace ixr,
 ptrace,
}

==> /var/lib/snapd/seccomp/profiles/snap.core.hook.configure <==
pwrite
pwrite64
pwritev

# FIXME: remove this after LP: #1446748 is implemented
# This is an older interface and single entry point that can be used instead
# of socket(), bind(), connect(), etc individually.
socketcall
ptrace
process_vm_readv