Thank you for filing a bug. The docker pid issue could be allowed by adding the following rule to dockerConnectedPlugAppArmor in the docker interface:
/{,var/}run/docker.pid r,
However, assigning to a cgroup is not currently handled by any interfaces. Do you have a simple reproducer to demonstrate the functionality you require?
Thank you for filing a bug. The docker pid issue could be allowed by adding the following rule to dockerConnected PlugAppArmor in the docker interface:
/{,var/ }run/docker. pid r,
However, assigning to a cgroup is not currently handled by any interfaces. Do you have a simple reproducer to demonstrate the functionality you require?