Comment 4 for bug 1078530

Regarding this being a bug in lxc as well, the failure to write under /sys is deliberately enforced by the apparmor policy. It can be worked around by using another apparmor profile (or none, as commented in the configuration file), but is not recommended - containers should not change kernel settings.