On Fri, 04 Oct 2013 13:48:01 +0200 Frank Thommen wrote:
Problem solved: A user had configured his "preferred browser" to be Thunderbird(!). As soon as he clicked on a link in an email, he ended in an endless loop with TB trying to open the link with the "preferred browser" (aka itself) again and again. This resulted in 40 MB audit loglines/hour in /var/log/Xorg.0.log.
That sounds like something that should be reported to the Thunderbird people. It probably wouldn't be too difficult for them to make Thunderbird an invalid selection under that setting.