Refactor HostConfig and escape apparmor confinement
use a symlink instead of a copy
rebase
Merge pull request #2497 from dotcloud/jpetazzo-escape-apparmor-confinement

Runtime: escape apparmor confinement