From a5cad68c363be3c2d998b3a455d6a3fb2bbcc601 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Fri, 2 Apr 2021 10:05:38 +0100
Subject: [PATCH] Firefox & Chromium: allow read access to some user file.

---
 apparmor.d/groups/browsers/chromium-chromium | 1 +
 apparmor.d/groups/browsers/firefox           | 1 +
 2 files changed, 2 insertions(+)

diff --git a/apparmor.d/groups/browsers/chromium-chromium b/apparmor.d/groups/browsers/chromium-chromium
index 69ab1757..bda0aa6b 100644
--- a/apparmor.d/groups/browsers/chromium-chromium
+++ b/apparmor.d/groups/browsers/chromium-chromium
@@ -21,6 +21,7 @@ profile chromium-chromium @{exec_path} {
   include <abstractions/mesa>
   include <abstractions/audio>
   include <abstractions/user-download-strict>
+  include <abstractions/user-read>
   include <abstractions/thumbnails-cache-read>
   include <abstractions/nameservice-strict>
   include <abstractions/ssl_certs>
diff --git a/apparmor.d/groups/browsers/firefox b/apparmor.d/groups/browsers/firefox
index 2f6603e6..81553d9e 100644
--- a/apparmor.d/groups/browsers/firefox
+++ b/apparmor.d/groups/browsers/firefox
@@ -24,6 +24,7 @@ profile firefox @{exec_path} {
   include <abstractions/audio>
   include <abstractions/enchant>
   include <abstractions/user-download-strict>
+  include <abstractions/user-read>
   include <abstractions/thumbnails-cache-read>
   include <abstractions/nameservice-strict>
   include <abstractions/deny-dconf>