OK, some more, hope this is useful and the right place.
I filtered the noise above out [1] and have now noticed a much small amount of these:
Mar 31 08:05:05 ubuntu-904 dbus-daemon: Rejected send message, 1 matched rules; type="method_call", sender=":1.32" (uid=1000 pid=4091 comm="/usr/lib/indicator-applet/indicator-applet --oaf-a") interface="org.freedesktop.DBus.Properties" member="Get" error name="(unset)" requested_reply=0 destination=":1.529" (uid=109 pid=17067 comm="/usr/lib/policykit/polkitd ")) Mar 31 08:05:56 ubuntu-904 kernel: [101220.020438] type=1502 audit(1238501156.075:12): operation="inode_permission" requested_mask="x::" denied_mask="x::" fsuid=0 name="/usr/local/Brother/Printer/mfc9840cdw/cupswrapper/brlpdwrapper_mfc9840cdw" pid=2391 profile="/usr/sbin/cupsd" Mar 31 08:06:40 ubuntu-904 syslogd 1.5.0#5ubuntu3: restart. Mar 31 08:35:10 ubuntu-904 dbus-daemon: Rejected send message, 1 matched rules; type="method_call", sender=":1.32" (uid=1000 pid=4091 comm="/usr/lib/indicator-applet/indicator-applet --oaf-a") interface="org.freedesktop.DBus.Properties" member="Get" error name="(unset)" requested_reply=0 destination=":1.538" (uid=0 pid=18132 comm="/usr/lib/NetworkManager/nm-dhcp-client.action ")) Mar 31 08:35:10 ubuntu-904 dhclient: DHCPREQUEST of 192.168.1.100 on eth0 to 192.168.1.11 port 67 Mar 31 08:35:10 ubuntu-904 dhclient: DHCPACK of 192.168.1.100 from 192.168.1.11
I even got some like this when manually testing my regex [1]!
Mar 31 03:17:09 ubuntu-904 dbus-daemon: Rejected send message, 1 matched rules; type="method_call", sender=":1.32" (uid=1000 pid=4091 comm="/usr/lib/indicator-applet/indicator-applet --oaf-a") interface="org.freedesktop.DBus.Properties" member="Get" error name="(unset)" requested_reply=0 destination=":1.446" (uid=0 pid=1279 comm="su -s /bin/bash -c /usr/sbin/logcheck -tsol /tmp/m"))
___________________________ [1] Logcheck regex to filter out my most noisy (cron) message: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dbus-daemon: Rejected send message, [0-9]+ matched rules; type="method_call", sender=":[0-9.]+" \(uid=[0-9]+ pid=[0-9]+ comm="/usr/lib/indicator-applet/indicator-applet --oaf-a"\) interface="org.freedesktop.DBus.Properties" member="Get" error name="\(unset\)" requested_reply=0 destination="[0-9:.]+" \(uid=0 pid=[0-9]+ comm="/USR/SBIN/CRON "\)\)
OK, some more, hope this is useful and the right place.
I filtered the noise above out [1] and have now noticed a much small amount of these:
Mar 31 08:05:05 ubuntu-904 dbus-daemon: Rejected send message, 1 matched rules; type="method_call", sender=":1.32" (uid=1000 pid=4091 comm="/ usr/lib/ indicator- applet/ indicator- applet --oaf-a") interface= "org.freedeskto p.DBus. Properties" member="Get" error name="(unset)" requested_reply=0 destination= ":1.529" (uid=109 pid=17067 comm="/ usr/lib/ policykit/ polkitd ")) 6.075:12) : operation= "inode_ permission" requested_ mask="x: :" denied_mask="x::" fsuid=0 name="/ usr/local/ Brother/ Printer/ mfc9840cdw/ cupswrapper/ brlpdwrapper_ mfc9840cdw" pid=2391 profile= "/usr/sbin/ cupsd" usr/lib/ indicator- applet/ indicator- applet --oaf-a") interface= "org.freedeskto p.DBus. Properties" member="Get" error name="(unset)" requested_reply=0 destination= ":1.538" (uid=0 pid=18132 comm="/ usr/lib/ NetworkManager/ nm-dhcp- client. action "))
Mar 31 08:05:56 ubuntu-904 kernel: [101220.020438] type=1502 audit(123850115
Mar 31 08:06:40 ubuntu-904 syslogd 1.5.0#5ubuntu3: restart.
Mar 31 08:35:10 ubuntu-904 dbus-daemon: Rejected send message, 1 matched rules; type="method_call", sender=":1.32" (uid=1000 pid=4091 comm="/
Mar 31 08:35:10 ubuntu-904 dhclient: DHCPREQUEST of 192.168.1.100 on eth0 to 192.168.1.11 port 67
Mar 31 08:35:10 ubuntu-904 dhclient: DHCPACK of 192.168.1.100 from 192.168.1.11
I even got some like this when manually testing my regex [1]!
Mar 31 03:17:09 ubuntu-904 dbus-daemon: Rejected send message, 1 matched rules; type="method_call", sender=":1.32" (uid=1000 pid=4091 comm="/ usr/lib/ indicator- applet/ indicator- applet --oaf-a") interface= "org.freedeskto p.DBus. Properties" member="Get" error name="(unset)" requested_reply=0 destination= ":1.446" (uid=0 pid=1279 comm="su -s /bin/bash -c /usr/sbin/logcheck -tsol /tmp/m"))
_______ _______ _______ ______ usr/lib/ indicator- applet/ indicator- applet --oaf-a"\) interface= "org.freedeskto p.DBus. Properties" member="Get" error name="\(unset\)" requested_reply=0 destination= "[0-9:. ]+" \(uid=0 pid=[0-9]+ comm="/ USR/SBIN/ CRON "\)\)
[1] Logcheck regex to filter out my most noisy (cron) message:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dbus-daemon: Rejected send message, [0-9]+ matched rules; type="method_call", sender=":[0-9.]+" \(uid=[0-9]+ pid=[0-9]+ comm="/