From dc7a83886c4d431b3cc5b78d4926ee39fd87f2c3 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Fri, 2 Apr 2021 10:08:24 +0100
Subject: [PATCH] Firefox: allow dconf as it breaks firefox settings and
 extension otherwise.

---
 apparmor.d/groups/browsers/firefox | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/apparmor.d/groups/browsers/firefox b/apparmor.d/groups/browsers/firefox
index 81553d9e..e8dd41f8 100644
--- a/apparmor.d/groups/browsers/firefox
+++ b/apparmor.d/groups/browsers/firefox
@@ -27,7 +27,7 @@ profile firefox @{exec_path} {
   include <abstractions/user-read>
   include <abstractions/thumbnails-cache-read>
   include <abstractions/nameservice-strict>
-  include <abstractions/deny-dconf>
+  include <abstractions/ssl_certs>
   include <abstractions/deny-root-dir-access>
   ##include <abstractions/nvidia>
 
@@ -187,6 +187,10 @@ profile firefox @{exec_path} {
   owner /dev/tty[0-9]* rw,
 
 
+  include <abstractions/dconf>
+  owner @{run}/user/[0-9]*/dconf/ rw,
+  owner @{run}/user/[0-9]*/dconf/user rw,
+
   profile open {
     include <abstractions/base>
     include <abstractions/xdg-open>