Add AppArmor support to native driver + change pipe/dup logic

Docker-DCO-1.1-Signed-off-by: Guillaume J. Charmes <guillaume.charmes@docker.com> (github: creack)

execdriver/native/default_template.go

@@ -37,6 +37,7 @@ func createContainer(c *execdriver.Command) *libcontainer.Container {
 	if c.Privileged {
 		container.Capabilities = nil
 		container.Cgroups.DeviceAccess = true
+		container.Context["apparmor_profile"] = "unconfined"
 	}
 	if c.Resources != nil {
 		container.Cgroups.CpuShares = c.Resources.CpuShares
@@ -78,5 +79,8 @@ func getDefaultTemplate() *libcontainer.Container {
 			Parent:       "docker",
 			DeviceAccess: false,
 		},
+		Context: libcontainer.Context{
+			"apparmor_profile": "lxc-container-default",
+		},
 	}
 }