AppArmor profile exchange

#include <tunables/global>
/usr/sbin/cron {
  #include <abstractions/authentication>
  #include <abstractions/base>
  #include <abstractions/nameservice>

  capability setgid,
  capability setuid,

  /bin/dash ixr,
  /etc/cron.d/ r,
  /etc/cron.d/* r,
  /etc/crontab r,
  /etc/environment r,
  /proc/*/mounts r,
  /proc/filesystems r,
  /usr/sbin/cron mr,
  /var/run/crond.pid krw,
  /var/run/utmp krw,
  /var/spool/cron/crontabs/ r,
  /var/spool/cron/crontabs/* r,
}