Add needed apparmor permissions for nesting
Add needed apparmor permissions for nesting

In order to attach to a container (nested), we need 'ptrace'.

In order for lxc-stop to work, we need 'signal'.

The stock lxc nesting profile provides these by inheriting them
from the 'start-container' profile.  We hadn't added them to the
apparmor code for containers with security.nesting=1.  Add them.

Signed-off-by: Serge Hallyn <3df611b026e4639bee8aef7a4beb2e39fcebb313@ubuntu.com>

lxc/lxd-pkg-ubuntu,lxc/lxd-pkg-ubuntu,lxc/lxd-pkg-ubuntu