Comment 7 for bug 1408833

Here is a simpler apparmor policy (that is, no tincluding lxc abstractions):

#include <tunables/global>

/home/serge/test/aasocat {
  #include <abstractions/base>
  #include <abstractions/dbus>
  /home/serge/test/aasocat ixr,
  capability,
  network,
  file,
  /var/** rw,
  /usr/bin/** ixr,
  /bin/** ixr,
}