Comment # 8 on bug 857122 from Christian Boltz

I don't use nagios, therefore I can only judge based on the log entries from
comment #0. It seems the following event is not covered by the profile yet:
(unless I overlooked something in the abstractions)

2013-12-30T11:45:14.471441+01:00 hermes kernel: [904962.186632] type=1400
audit(1388400314.470:1115): apparmor="DENIED" operation="file_mmap"
parent=31555 profile="/usr/lib/nagios/plugins/check_zypper//zypper"
name="/usr/lib64/libproxy-0.4.11/modules/config_gnome3.so" pid=31556
comm="zypper" requested_mask="m" denied_mask="m" fsuid=471 ouid=0

You'll probably need to add the following line to the zypper subprofile:
    /usr/lib*/libproxy-*/modules/config_gnome3.so mr,

BTW: the update notes for the apparmor package in this bugreport were for
/proc/sys/crypto/fips_enabled ;-)