User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0

Steps to reproduce:

It has been reported https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/2067564 that when using the firefox snap on Ubuntu and viewing youtube, syslog is flooded with AppArmor DENIAL messages

Actual results:

The messages look like the following:

May 30 08:09:43 moshe kernel: [12150.504971] audit: type=1107 audit(1717045783.051:205): pid=896 uid=103 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal" bus="system" path="/org/freedesktop/login1" interface="org.freedesktop.DBus.Properties" member="PropertiesChanged" name=":1.4" mask="receive" pid=12451 label="snap.firefox.firefox" peer_pid=930 peer_label="unconfined"

snapd provides access to this DBus signal via the login-session-observe interface - https://github.com/snapcore/snapd/blob/05c117cc187feeee8581629d32dc751a4e43c292/interfaces/builtin/login_session_observe.go#L73

However, the firefox snap does not plug this interface (and hence is not connected to it) and so is denied this access.

Expected results:

The firefox snap should list login-session-observe in the plugs section and a request should be made via https://forum.snapcraft.io/ in the store-requests category for this interface to be auto-connected to avoid the syslog being spammed by such messages.

Moving this to Firefox Build System > Third Party Packaging component to allow our engineers to examine it more closely. If this is not the right component, please move it to a more appropriate one. Thanks!

I've landed the proposed fix of adding the login-session-observe plug for current Nightly and Beta, and also staged Firefox snap 127.0-2.1 stable candidates for review and release by Mozilla.

https://github.com/canonical/firefox-snap/pull/61
https://github.com/canonical/firefox-snap/commit/12550e5cdc2291017af155de0eef84118e9d4bc9
https://github.com/canonical/firefox-snap/commit/2381741cc522eb6f87db672b1b3ba8be68a46e9b
https://forum.snapcraft.io/t/request-for-auto-connection-of-login-session-observe-for-firefox-snap/40519

This change has been released to Firefox snap stable as 127.0-2.1 by Mozilla release team, therefore closing as fixed.