Add and update CNI profiles

apparmor.d/groups/virt/cni-xtables-nft

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}{s,}bin/xtables-nft-multi
 profile cni-xtables-nft {
     include <abstractions/base>
+    include <abstractions/consoles>
     include <abstractions/nameservice-strict>
 
     capability net_admin,
@@ -30,6 +31,4 @@ profile cni-xtables-nft {
     /etc/nftables.conf rw,
 
     @{PROC}/@{pids}/net/ip_tables_names r,
-
-    /dev/pts/[0-9]* rw,
 }