fix sound in firefox started from thunderbird

and move disable-mnt from thunderbird to firefox profile, in alignment with
recent commit from @Fred-Barclay

2 files changed, 4 insertions, 5 deletions

diff --git a/etc/firefox.profile b/etc/firefox.profile
index a8a9e014e..57a5bc7a7 100644
--- a/etc/firefox.profile
+++ b/etc/firefox.profile
@@ -70,7 +70,7 @@ include /etc/firejail/whitelist-common.inc
 include /etc/firejail/whitelist-var-common.inc
 
 caps.drop all
-# machine-id breaks pulse audio; if shoud work fine in setups where sound is not required
+# machine-id breaks pulse audio; if should work fine in setups where sound is not required
 #machine-id
 netfilter
 nodvd
@@ -83,13 +83,12 @@ seccomp
 shell none
 tracelog
 
+disable-mnt
 # firefox requires a shell to launch on Arch.
 # private-bin firefox,which,sh,dbus-launch,dbus-send,env,bash
 private-dev
-
 # private-etc below works fine on most distributions. There are some problems on CentOS.
 # private-etc iceweasel,ca-certificates,ssl,machine-id,dconf,selinux,passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,xdg,gtk-2.0,gtk-3.0,X11,pango,fonts,firefox,mime.types,mailcap,asound.conf,pulse
-
 private-tmp
 
 noexec ${HOME}
diff --git a/etc/thunderbird.profile b/etc/thunderbird.profile
index 8af981d70..2d14342e0 100644
--- a/etc/thunderbird.profile
+++ b/etc/thunderbird.profile
@@ -26,8 +26,8 @@ include /etc/firejail/whitelist-var-common.inc
 
 # We need the real /tmp for data exchange when xdg-open handles email attachments on KDE
 ignore private-tmp
-machine-id
-disable-mnt
+# machine-id breaks pulse audio; if should work fine in setups where sound is not required
+#machine-id
 read-only ${HOME}/.config/mimeapps.list
 
 # allow browsers