Bug 3008 is about documenting the workaround to get passwdaliases working on SLED10 systems. This bug is about finding a better solution; a solution that works out of the box. For example, perhaps it would be possible to add a configuration file to /etc/apparmor.d/, which specifies that nscd should be allowed to read /etc/passwdaliases. At least on SLED11, there's a file called /etc/apparmor.d/usr.sbin.nscd. One problem, however, might be that it's perhaps not possible to *extend* that configuration.