Accepting request 337046 from home:cboltz

- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)

OBS-URL: https://build.opensuse.org/request/show/337046
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=145

apparmor.spec

@@ -95,8 +95,11 @@ Patch7:         apparmor-lessopen-profile.patch
 # boo#862170 - fix ugly initscript output (commited upstream trunk r3208)
 Patch8:         fix-initscript-aa_log_end_msg.diff
 
-# additional winbindd permissions (commited upstream trunk r3213, 2.9 r2946) - (boo#921098 #c15..19)
-Patch9:         apparmor-winbindd-r3213.diff
+# additional syslog-ng permissions (submitted upstream 2015-10-07) (boo#948584, boo#948753)
+Patch9:         syslog-ng-profile-boo948584.diff
+
+# several profile updates taken from upstream bzr trunk r3205..3241
+Patch10:        upstream-profile-updates-r3205-3241.diff
 
 Url:            https://launchpad.net/apparmor
 PreReq:         sed
@@ -448,6 +451,7 @@ SubDomain.
 %patch7 -p1
 %patch8
 %patch9
+%patch10
 
 # search for left-over multiline rules
 test -z "$(grep -r '^\s*\(unix\|dbus\)[^,]\(([^)]*)\)*[^,]*$' profiles/apparmor.d/)"