$ diff -u snap.core.3247.usr.lib.snapd.snap-confine /etc/apparmor.d/snap.core.3247.usr.lib.snapd.snap-confine
--- snap.core.3247.usr.lib.snapd.snap-confine	2017-10-25 15:04:52.129148918 -0700
+++ /etc/apparmor.d/snap.core.3247.usr.lib.snapd.snap-confine	2017-10-22 16:08:12.141385425 -0700
@@ -327,7 +327,6 @@
     capability sys_ptrace,
     # allow snap-confine to read /proc/1/ns/mnt
     ptrace trace peer=unconfined,
-    ptrace (read) peer=unconfined
 
     mount options=(rw rbind) /run/snapd/ns/ -> /run/snapd/ns/,
     mount options=(private) -> /run/snapd/ns/,