update apparmor profiles

Adpated to the apparmor.d structure.

Signed-off-by: Mikhail Morfikov <mmorfikov@gmail.com>

apparmor.d/groups/cron/crontab

@@ -23,6 +23,8 @@ profile crontab @{exec_path} {
   /{usr/,}bin/sensible-editor rCx -> editor,
   /{usr/,}bin/vim.*           rCx -> editor,
 
+  /etc/cron.{allow,deny} r,
+
         /var/spool/cron/ r,
         /var/spool/cron/crontabs/ rw,
   owner /var/spool/cron/crontabs/* rw,
@@ -53,6 +55,9 @@ profile crontab @{exec_path} {
           /tmp/ r,
     owner /tmp/crontab.*/crontab rw,
 
+    # file_inherit
+    /etc/cron.{allow,deny} r,
+
   }
 
   include if exists <local/crontab>