Comment 1 for bug 1664644

Thank you for filing a bug. The docker pid issue could be allowed by adding the following rule to dockerConnectedPlugAppArmor in the docker interface:

/{,var/}run/docker.pid r,

However, assigning to a cgroup is not currently handled by any interfaces. Do you have a simple reproducer to demonstrate the functionality you require?