Every day, in the syslog I get some of these:
Jun 03 18:35:07 tucano.isti.cnr.it dbus-daemon[3578]: [session uid=1000 pid=3578 pidfd=5] Activating service name='org.freedesktop.Notifications' requested by ':1.461' (uid=1000 pid=1841859 comm="/snap/teams-for-linux/1633/teams-for-linux --ozone" label="snap.teams-for-linux.teams-for-linux (enforce)")
Jun 03 18:35:07 tucano.isti.cnr.it mate-notification-daemon[639666]: Couldn't connect to accessibility bus: Failed to connect to socket /root/.cache/at-spi/bus_0: Permission denied
Jun 03 18:35:07 tucano.isti.cnr.it dbus-daemon[3578]: [session uid=1000 pid=3578 pidfd=5] Successfully activated service 'org.freedesktop.Notifications'
The comm= and label= in the first line may be different, these are the ones that I have obbserved so far:
comm="mate-notification-properties" label="unconfined"
comm="/opt/zoom/ZoomWebviewHost webview:{fba7fa3e-960d-4" label="firefox (unconfined)"
comm="/snap/teams-for-linux/1633/teams-for-linux --ozone" label="snap.teams-for-linux.teams-for-linux (enforce)"
comm="/usr/bin/telegram-desktop --" label="unconfined"
comm="/usr/lib/thunderbird/thunderbird --name=thunderbir" label="firefox (unconfined)"
I see those because I use logcheck, who apparently reads them from journalctl, as I can not find in the syslog
I observe no specific adverse effect apart from the logcheck reports. Maybe some notifications are lost, but I cannot tell for sure.