This isn't a 17.10 regression - it's been happening for a few years, e.g.:
https://bugs.launchpad.net/mos/+bug/1475019
And, FWIW, I added the flags=(attach_disconnected) to the config file yesterday on one of my systems and whereas it does seem to have removed the operation="sendmsg" reports, I still get this at boot time:
Dec 28 14:15:53 parent kernel: [ 24.127330] audit: type=1400 audit(1514470553.526:18): apparmor="DENIED" operation="open" profile="/usr/sbin/ntpd" name="/usr/local/sbin/" pid=1086 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 Dec 28 14:15:53 parent kernel: [ 24.127335] audit: type=1400 audit(1514470553.527:19): apparmor="DENIED" operation="open" profile="/usr/sbin/ntpd" name="/usr/local/bin/" pid=1086 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
This isn't a 17.10 regression - it's been happening for a few years, e.g.:
https:/ /bugs.launchpad .net/mos/ +bug/1475019
And, FWIW, I added the flags=( attach_ disconnected) to the config file yesterday on one of my systems and whereas it does seem to have removed the operation="sendmsg" reports, I still get this at boot time:
Dec 28 14:15:53 parent kernel: [ 24.127330] audit: type=1400 audit(151447055 3.526:18) : apparmor="DENIED" operation="open" profile= "/usr/sbin/ ntpd" name="/ usr/local/ sbin/" pid=1086 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 3.527:19) : apparmor="DENIED" operation="open" profile= "/usr/sbin/ ntpd" name="/ usr/local/ bin/" pid=1086 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Dec 28 14:15:53 parent kernel: [ 24.127335] audit: type=1400 audit(151447055