socat: minor fix in the profile

- Use @{bin}
 - Allow executable mapping and read for the binary

Signed-off-by: Nishit Majithia <nishit.nm@gmail.com>

apparmor.d/groups/network/socat

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = /usr/bin/socat
+@{exec_path} = @{bin}/socat
 profile socat @{exec_path} {
   include <abstractions/base>
   include <abstractions/nameservice-strict>
@@ -29,6 +29,8 @@ profile socat @{exec_path} {
   # fuctionalities that is why it is necessary to allow whole `network`
   network,
 
+  @{exec_path} mr,
+
   # Enale /dev/ptmx access for testsuite
   # /dev/ptmx rw,