This is also an issue on 16.04, logrotate continually fails to execute ejabberdctl after an apparmour update:
[413761.100538] audit: type=1400 audit(1560125582.853:33): apparmor="DENIED" operation="file_mmap" profile="/usr/sbin/ejabberdctl//su" name="/bin/su" pid=5366 comm="su" requested_mask="m" denied_mask="m" fsuid=0 ouid=0
This is also an issue on 16.04, logrotate continually fails to execute ejabberdctl after an apparmour update: 2.853:33) : apparmor="DENIED" operation= "file_mmap" profile= "/usr/sbin/ ejabberdctl/ /su" name="/bin/su" pid=5366 comm="su" requested_mask="m" denied_mask="m" fsuid=0 ouid=0
[413761.100538] audit: type=1400 audit(156012558