tasks: lxc_apparmor: Relax the ping profile
tasks: lxc_apparmor: Relax the ping profile

We need to use the 'attach_disconnected' flag in the ping profile to fix
the following problem when using the overlayfs backend

[  773.853958] audit: type=1400 audit(1520265543.357:202): apparmor="DENIED" operation="getattr"
info="Failed name lookup - disconnected path"
error=-13 profile="/{usr/,}bin/ping" name="@/.snapshots/1/snapshot/var/lib/lxc/opensuse-42.3-amd64/rootfs/etc/ld.so.cache"
pid=9372 comm="ping" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

The 'attach_disconnected' flag needs to be used in order for paths
belonging to a different namespace to be attached to current root.

Closes-Bug: #1753454
Link: https://bugzilla.opensuse.org/show_bug.cgi?id=1083980
Change-Id: Ied7632037f737c3f32c34dac70531065c54496c9

openstack/openstack-ansible-lxc_hosts,openstack/openstack-ansible-lxc_hosts