apparmor: allow binding /run/{,lock/} -> /var/run/{,lock/}
apparmor: allow binding /run/{,lock/} -> /var/run/{,lock/}

Some systems need to be able to bind-mount /run to /var/run
and /run/lock to /var/run/lock. (Tested with opensuse 13.1
containers migrated from openvz.)

Signed-off-by: Wolfgang Bumiller <bac7898f539fd233d9ce33be7a9eda13ee647930@proxmox.com>

LynxChaus/lxc,tych0/lxc,caglar10ur/lxc,ss1h2a3tw/lxc,aeris/lxc,LynxChaus/lxc,akshaykarle/lxc,ss1h2a3tw/lxc,terceiro/lxc,bostjan/lxc,thmo/lxc,terceiro/lxc,hallyn/lxc,cjwatson/lxc,thmo/lxc,thmo/lxc,caglar10ur/lxc,QingweiPeterLan/cs188-lxc,federicobriata/lxc,bostjan/lxc,ysbnim/lxc,aeris/lxc,ysbnim/lxc,hallyn/lxc,akshaykarle/lxc,caglar10ur/lxc,hallyn/lxc,tych0/lxc,QingweiPeterLan/cs188-lxc,aeris/lxc,hfuCN/lxc,ysbnim/lxc,ss1h2a3tw/lxc,GreatFruitOmsk/lxc,QingweiPeterLan/cs188-lxc,tych0/lxc,GreatFruitOmsk/lxc,federicobriata/lxc,bostjan/lxc,akshaykarle/lxc,federicobriata/lxc,cjwatson/lxc,GreatFruitOmsk/lxc,hfuCN/lxc,cjwatson/lxc,hfuCN/lxc,terceiro/lxc,LynxChaus/lxc