Syslog flooding

Asked by Moshe Caspi

Do you see this line in syslog which recently started to appear many times? Is it legitimate to appear many times?

Oct 17 08:49:25 moshe dbus-daemon[1756]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/gnome/Mutter/IdleMonitor/Core" interface="org.gnome.Mutter.IdleMonitor" member="GetIdletime" mask="send" name=":1.44" pid=5217 label="snap.firefox.firefox" peer_pid=2050 peer_label="unconfined"
Oct 17 08:49:26 moshe dbus-daemon[1756]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/gnome/Mutter/IdleMonitor/Core" interface="org.gnome.Mutter.IdleMonitor" member="GetIdletime" mask="send" name=":1.44" pid=5217 label="snap.firefox.firefox" peer_pid=2050 peer_label="unconfined"
Oct 17 08:49:31 moshe dbus-daemon[1756]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/gnome/Mutter/IdleMonitor/Core" interface="org.gnome.Mutter.IdleMonitor" member="GetIdletime" mask="send" name=":1.44" pid=5217 label="snap.firefox.firefox" peer_pid=2050 peer_label="unconfined"
Oct 17 08:49:32 moshe dbus-daemon[1756]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/gnome/Mutter/IdleMonitor/Core" interface="org.gnome.Mutter.IdleMonitor" member="GetIdletime" mask="send" name=":1.44" pid=5217 label="snap.firefox.firefox" peer_pid=2050 peer_label="unconfined"

Question information

Language:
English Edit question
Status:
Open
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Paul Walsh (pwalsh71) said :
#2

I'm having the same issue, and my whole network stops. I need to stop and restart networking to get access again.

Oct 24 13:11:20 pwdesk dbus-daemon[5920]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/gnome/Mutter/IdleMonitor/Core" interface="org.gnome.Mutter.IdleMonitor" member="GetIdletime" mask="send" name=":1.39" pid=16928 label="snap.firefox.firefox" peer_pid=6537 peer_label="unconfined"
Oct 24 13:11:25 pwdesk dbus-daemon[5920]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/gnome/Mutter/IdleMonitor/Core" interface="org.gnome.Mutter.IdleMonitor" member="GetIdletime" mask="send" name=":1.39" pid=16928 label="snap.firefox.firefox" peer_pid=6537 peer_label="unconfined"
Oct 24 13:11:28 pwdesk systemd[1]: NetworkManager-dispatcher.service: Succeeded.
Oct 24 13:11:30 pwdesk dbus-daemon[5920]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/gnome/Mutter/IdleMonitor/Core" interface="org.gnome.Mutter.IdleMonitor" member="GetIdletime" mask="send" name=":1.39" pid=16928 label="snap.firefox.firefox" peer_pid=6537 peer_label="unconfined"
Oct 24 13:12:17 pwdesk dbus-daemon[5920]: message repeated 11 times: [ apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/gnome/Mutter/IdleMonitor/Core" interface="org.gnome.Mutter.IdleMonitor" member="GetIdletime" mask="send" name=":1.39" pid=16928 label="snap.firefox.firefox" peer_pid=6537 peer_label="unconfined"]

lsb_release -a
LSB Version: core-11.1.0ubuntu2-noarch:security-11.1.0ubuntu2-noarch
Distributor ID: Ubuntu
Description: Ubuntu 20.04.6 LTS
Release: 20.04
Codename: focal

uname -a
Linux pwdesk 5.4.0-165-generic #182-Ubuntu SMP Mon Oct 2 19:43:28 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

Revision history for this message
Moshe Caspi (mcaspi12) said :
#3

Thanks. Just for information, the idle monitoring looks like a new feature that started in Firefox version 118.0, but I don't see a reason why flooding syslog every few seconds.

Your network problem looks like a different issue, and you might want to open a new question.

Revision history for this message
flin (flinandy59) said :
#4

The repeated appearance of the syslog line indicates that the specified operation, a D-Bus method call to "GetIdletime" on the session bus by the "snap.firefox.firefox" application, is being denied due to an AppArmor security policy restriction. To resolve this issue, a thorough investigation is necessary to understand why the application is attempting this operation repeatedly. It could be a legitimate function, or it might indicate a misconfiguration or malfunction within the application. Reviewing and potentially adjusting the AppArmor policy for the application may be required to allow the necessary D-Bus method calls while ensuring system security. Additionally, monitoring the system for any adverse effects resulting from these denials is advisable to ensure system stability and functionality. Read more at https://lizenzbestellen.com/nl/service/rijbewijs-kopen-uber-all-in-nethrlands/

Can you help with this problem?

Provide an answer of your own, or ask Moshe Caspi for more information if necessary.

To post a message you must log in.