Comment 9 for bug 981955

Note, as per the test case in Description, you'll still need to use a lxc.conf containing 'lxc.aa_profile = unconfined' (or some other custom profile) to have permissions you need on the host.