This isn't a 17.10 regression - it's been happening for a few years, e.g.: https://bugs.launchpad.net/mos/+bug/1475019
And, FWIW, I added the flags=(attach_disconnected) to the config file yesterday on one of my systems and whereas it does seem to have removed the operation="sendmsg" reports, I still get this at boot time: Dec 28 14:15:53 parent kernel: [ 24.127330] audit: type=1400 audit(1514470553.526:18): apparmor="DENIED" operation="open" profile="/usr/sbin/ntpd" name="/usr/local/sbin/" pid=1086 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 Dec 28 14:15:53 parent kernel: [ 24.127335] audit: type=1400 audit(1514470553.527:19): apparmor="DENIED" operation="open" profile="/usr/sbin/ntpd" name="/usr/local/bin/" pid=1086 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1727202 Title: [17.10 regression] AppArmor ntp denial: Failed name lookup - disconnected path To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1727202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs