Accepting request 157409 from home:cboltz

- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104)

Please also add this patch to openSUSE 12.3

The patch only adds permissions, which means it can't break anything.
Even "deny capability block_suspend" doesn't take away any permissions 
(everything that is not allowed is denied by default). The deny rule
just disables the logging for capability block_suspend.

OBS-URL: https://build.opensuse.org/request/show/157409
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=33

apparmor.spec

@@ -70,6 +70,9 @@ Patch2:         apparmor-samba-include-permissions-for-shares.diff
 # changed paths for MySQL, add MariaDB support (bnc#798183, commited upstream 2013-01-13, trunk r2104, 2.8 branch r2070)
 Patch3:         apparmor-abstractions-mysql-path.diff
 
+# nscd profile: add missing permissions and deny capability block_suspend (bnc#807104, patch sent upstream 2013-03-05)
+Patch4:         apparmor-profiles-nscd.diff
+
 # split a long string in AppArmor.pm. Not accepted upstream because they want a solution without hardcoded width.
 Patch5:         apparmor-utils-string-split
 
@@ -413,6 +416,7 @@ SubDomain.
 %patch1 -p1
 %patch2 -p0
 %patch3 -p0
+%patch4 -p0
 %patch5 -p1
 %patch12 -p1