feat(profiles): general update.

apparmor.d/groups/virt/containerd

@@ -21,7 +21,9 @@ profile containerd @{exec_path} {
   /{usr/,}bin/containerd-shim-runc-v2 rPUx,
   /{usr/,}bin/kmod                    rPx,
 
+  /etc/cni/ rw,
   /etc/cni/{,**} r,
+  /etc/cni/net.d/ rw,
   /etc/containerd/*.toml r,
 
   /var/lib/containerd/{,**} rwk,
@@ -30,6 +32,8 @@ profile containerd @{exec_path} {
   @{run}/docker/containerd/{,**} rwk,
   /opt/containerd/{,**} rw,
 
+  @{run}/systemd/notify w,
+
   @{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
 
   owner @{PROC}/@{pids}/uid_map r,