Ensure it can access file system that isn't bind mounted

Signed-off-by: Dom Del Nano <ddelnano@gmail.com>

Author: ddelnano

.github/workflows/build_and_test.yaml

@@ -163,8 +163,8 @@ jobs:
       run: |
         # Github actions container runner creates a docker network without IPv6 support. We enable it manually.
         sysctl -w net.ipv6.conf.lo.disable_ipv6=0
-        cat /sys/kernel/security/lsm
-        echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+        cat /proc/1/root/sys/kernel/security/lsm
+        echo 0 > /proc/1/root/proc/sys/kernel/apparmor_restrict_unprivileged_userns
         sysctl -w kernel.unprivileged_userns_clone=1
         ./scripts/bazel_ignore_codes.sh test ${{ matrix.args }} --target_pattern_file=target_files/${{ matrix.tests }} \
           2> >(tee bazel_stderr)