After seeing a bug about rsyslog: https://bugs.launchpad.net/kolla/+bug/1501694. Today, I suddenly thought about my bug (this bug), and it seems it not due apparmor, privileged flag is enough to bypass apparmor. This problem was due /dev/log that was created by another containers before rsyslog container is up and running. The solution is as same as bug1501694, just remove /dev/log.
Hello,
After seeing a bug about rsyslog: https:/ /bugs.launchpad .net/kolla/ +bug/1501694. Today, I suddenly thought about my bug (this bug), and it seems it not due apparmor, privileged flag is enough to bypass apparmor. This problem was due /dev/log that was created by another containers before rsyslog container is up and running. The solution is as same as bug1501694, just remove /dev/log.