Fix apparmor=”DENIED” operation=”sendmsg” class=”file”

by

SSH into the container causing the message and add the permission to a local AppArmor override file

echo "/run/systemd/journal/dev-log r," >> /etc/apparmor.d/local/usr.sbin.rsyslogd

Reload the apparmor profile.

apparmor_parser -r /etc/apparmor.d/usr.sbin.rsyslogd

Reboot the container.

reboot

https://forum.proxmox.com/threads/very-frequent-apparmor-logs-after-updating-pve.176684/#:~:text=Fix%20within%20Container:%20The%20recommended%20solution%20involves,applied%20directly%20to%20the%20container’s%20AppArmor%20configuration.