Public bug reported:

Since my last reboot, Firefox has been logspamming my system with the
following message:

Dec 19 08:21:12 work kernel: audit: type=1400
audit(1766096472.659:55003): apparmor="DENIED" operation="open"
class="file" profile="snap.firefox.firefox" name="/proc/pressure/memory"
pid=13905 comm="MemoryPoller" requested_mask="r" denied_mask="r"
fsuid=1000 ouid=0

This message has occurred previously at a much lower frequency:

$ journalctl --boot --dmesg | fgrep 'profile="snap.firefox.firefox" 
name="/proc/pressure/memory"' | wc -l
10255
$ zgrep 'profile="snap.firefox.firefox" name="/proc/pressure/memory"' kern.log* 
| cut -d: -f2- | cut -dT -f1 | sort | uniq -c
      1 2025-11-17
      2 2025-11-24
      8 2025-11-27
      2 2025-12-05
      2 2025-12-06
   2690 2025-12-15
   1513 2025-12-16
   2405 2025-12-17
   3362 2025-12-18
    295 2025-12-19

I'm filing this against Firefox, since presumably it's responsible for
supplying a correct AppArmor profile for itself, but it's possible that
this has been activated by a kernel or AppArmor upgrade.  Here's the
relevant version info:

$ snap info firefox
name:      firefox
summary:   Mozilla Firefox web browser
publisher: Mozilla✓
store-url: https://snapcraft.io/firefox
contact:   
https://support.mozilla.org/kb/file-bug-report-or-feature-request-mozilla
license:   unset
description: |
  Firefox is a powerful, extensible web browser with support for modern web 
application
  technologies.
commands:
  - firefox
  - firefox.geckodriver
snap-id:      3wdHCAVyZEmYsCMFDE9qt92UV8rC8Wdk
tracking:     latest/stable
refresh-date: 7 days ago, at 17:34 AEST
channels:
  latest/stable:    146.0-2      2025-12-11 (7477) 262MB -
  latest/candidate: 146.0.1-1    2025-12-18 (7559) 262MB -
  latest/beta:      147.0b5-1    2025-12-18 (7560) 265MB -
  latest/edge:      148.0a1      2025-12-18 (7565) 300MB -
  esr/stable:       140.6.0esr-1 2025-12-10 (7454) 258MB -
  esr/candidate:    140.6.0esr-1 2025-12-16 (7548) 258MB -
  esr/beta:         ↑                                    
  esr/edge:         ↑                                    
installed:          146.0-2                 (7477) 262MB -
$ uptime
 08:13:33 up 3 days, 22:43,  1 user,  load average: 0.81, 0.97, 1.08
$ last | grep running
reboot   system boot  6.14.0-37-generi Mon Dec 15 09:30   still running
$ grep -i apparmor /var/log/dpkg.log | tail
2025-12-12 16:42:46 status half-installed apparmor:amd64 
4.0.1really4.0.1-0ubuntu0.24.04.4
2025-12-12 16:42:47 status unpacked apparmor:amd64 
4.0.1really4.0.1-0ubuntu0.24.04.5
2025-12-12 16:43:10 configure libapparmor1:amd64 
4.0.1really4.0.1-0ubuntu0.24.04.5 <none>
2025-12-12 16:43:10 status unpacked libapparmor1:amd64 
4.0.1really4.0.1-0ubuntu0.24.04.5
2025-12-12 16:43:10 status half-configured libapparmor1:amd64 
4.0.1really4.0.1-0ubuntu0.24.04.5
2025-12-12 16:43:10 status installed libapparmor1:amd64 
4.0.1really4.0.1-0ubuntu0.24.04.5
2025-12-12 16:43:10 configure apparmor:amd64 4.0.1really4.0.1-0ubuntu0.24.04.5 
<none>
2025-12-12 16:43:10 status unpacked apparmor:amd64 
4.0.1really4.0.1-0ubuntu0.24.04.5
2025-12-12 16:43:11 status half-configured apparmor:amd64 
4.0.1really4.0.1-0ubuntu0.24.04.5
2025-12-12 16:43:17 status installed apparmor:amd64 
4.0.1really4.0.1-0ubuntu0.24.04.5
$ dpkg -l apparmor linux-image-generic\*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                          Version                           
Architecture Description
+++-=============================-=================================-============-======================================
ii  apparmor                      4.0.1really4.0.1-0ubuntu0.24.04.5 amd64       
 user-space parser utility for AppArmor
ii  linux-image-generic-hwe-24.04 6.14.0-37.37~24.04.1              amd64       
 Generic Linux kernel image

(All timestamps in this report are AEST - UTC+10:00.)

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2136840

Title:
  Firefox snap AppArmor logspam for /proc/pressure/memory

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/2136840/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to