AppArmor profile exchange

#include <tunables/global>
/etc/cron.daily/mlocate {
  #include <abstractions/base>

  capability chown,
  capability dac_override,
  capability dac_read_search,
  capability fowner,
  capability fsetid,
  capability sys_admin,

  / r,
  /**/ r,
  /bin/dash ixr,
  /etc/cron.daily/mlocate mr,
  /etc/group r,
  /etc/mtab r,
  /etc/nsswitch.conf r,
  /etc/updatedb.conf r,
  /proc/*/mounts r,
  /usr/bin/ionice ixr,
  /usr/bin/updatedb.mlocate ixr,
  /var/lib/mlocate/* rw,
}