Its being caused by the gnome system-monitor snap. Its author is missing
some permissions required to use it properly on your system. It looks
like the system monitor is running and it keeps polling the file causing
this denial.

The apparmor rule to fix this is
  
    /run/mount/utab r,


You could add it to the file in 
  /var/lib/snapd/apparmor/profiles/snap.gnome-system-monitor  (it actually 
might be under a slightly different variant of - and .)

and manually replace using the apparmor parser

  sudo apparmor_parser -r /var/lib/snapd/apparmor/profiles/snap.gnome-
system-monitor

Unfortunately snappy may update this file on you and you will loose the
rule you have added.

The best solution is to contact the snap author so he can update the
snap to include the new permission in the snaps security manifest.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1787600

Title:
  kernel: [ 6230.503218] audit: type=1400 audit(1534512537.321:398960):
  apparmor="DENIED" operation="open" profile="snap.gnome-system-monitor
  .gnome-system-monitor" name="/run/mount/utab" pid=2265 comm="gnome-
  system-mo" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1787600/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to