dbuss apparmor="DENIED" interface="org.gnome.Mutter.IdleMonitor" spamming logs

[Angel D. Segarra]

On the latest 23.10 Mantic beta using firefox 118.0 spams the log with message:

apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/gnome/Mutter/IdleMonitor/Core" interface="org.gnome.Mutter.IdleMonitor" member="GetIdletime" mask="send" name=":1.34" pid=6444 label="snap.firefox.firefox" peer_pid=3234 peer_label="unconfined"

[madigal (osse7)]

Actual Mantic logs:

journalctl -b | grep DENIED
kernel: audit: type=1400 audit(1695910314.967:110): apparmor="DENIED" operation="connect" class="file" profile="/usr/sbin/cups-browsed" name="/run/systemd/resolve/io.systemd.Resolve" pid=1338 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=132 ouid=101
kernel: audit: type=1400 audit(1695910314.987:111): apparmor="DENIED" operation="connect" class="file" profile="/usr/sbin/cups-browsed" name="/run/systemd/resolve/io.systemd.Resolve" pid=1338 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=132 ouid=101
kernel: audit: type=1400 audit(1695910472.859:112): apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=4268 comm="snap-confine" capability=12 capname="net_admin"
kernel: audit: type=1400 audit(1695910472.859:113): apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=4268 comm="snap-confine" capability=38 capname="perfmon"
kernel: audit: type=1400 audit(1695910473.231:114): apparmor="DENIED" operation="open" class="file" profile="snap-update-ns.firefox" name="/var/lib/" pid=4284 comm="5" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
kernel: audit: type=1400 audit(1695910473.235:115): apparmor="DENIED" operation="open" class="file" profile="snap-update-ns.firefox" name="/var/lib/" pid=4284 comm="5" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
kernel: audit: type=1400 audit(1695910475.843:116): apparmor="DENIED" operation="mknod" class="file" profile="snap.firefox.firefox" name="/etc/igfx_user_feature.txt" pid=4405 comm="vaapitest" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
kernel: audit: type=1400 audit(1695910475.843:117): apparmor="DENIED" operation="mknod" class="file" profile="snap.firefox.firefox" name="/etc/igfx_user_feature_next.txt" pid=4405 comm="vaapitest" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Alex Murray (alexmurray)]

Proposed fix for snapd in https://github.com/snapcore/snapd/pull/13304