Its being caused by the gnome system-monitor snap. Its author is missing some permissions required to use it properly on your system. It looks like the system monitor is running and it keeps polling the file causing this denial.
The apparmor rule to fix this is /run/mount/utab r, You could add it to the file in /var/lib/snapd/apparmor/profiles/snap.gnome-system-monitor (it actually might be under a slightly different variant of - and .) and manually replace using the apparmor parser sudo apparmor_parser -r /var/lib/snapd/apparmor/profiles/snap.gnome- system-monitor Unfortunately snappy may update this file on you and you will loose the rule you have added. The best solution is to contact the snap author so he can update the snap to include the new permission in the snaps security manifest. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1787600 Title: kernel: [ 6230.503218] audit: type=1400 audit(1534512537.321:398960): apparmor="DENIED" operation="open" profile="snap.gnome-system-monitor .gnome-system-monitor" name="/run/mount/utab" pid=2265 comm="gnome- system-mo" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 Status in apparmor package in Ubuntu: New Bug description: This log repeats so many times in file /var/log/syslog and /var/log/kern.log, causing the size of 2 files exceed 100Mb, and the journal folder increase to several Gbs, causing no space left in "Filesystem root". To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1787600/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp