Fix chromium browsers in firejail 0.9.68

closes #4965

11 files changed, 21 insertions, 2 deletions

diff --git a/etc/profile-a-l/bnox.profile b/etc/profile-a-l/bnox.profile
index 8729d8d40..c76f5d90e 100644
--- a/etc/profile-a-l/bnox.profile
+++ b/etc/profile-a-l/bnox.profile
@@ -6,6 +6,8 @@ include bnox.local
 include globals.local
 
 # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
+ignore whitelist /usr/share/mozilla/extensions
+ignore whitelist /usr/share/webext
 ignore include whitelist-runuser-common.inc
 ignore include whitelist-usr-share-common.inc
 
diff --git a/etc/profile-a-l/dnox.profile b/etc/profile-a-l/dnox.profile
index 2169c8552..612bd0527 100644
--- a/etc/profile-a-l/dnox.profile
+++ b/etc/profile-a-l/dnox.profile
@@ -6,6 +6,8 @@ include dnox.local
 include globals.local
 
 # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
+ignore whitelist /usr/share/mozilla/extensions
+ignore whitelist /usr/share/webext
 ignore include whitelist-runuser-common.inc
 ignore include whitelist-usr-share-common.inc
 
diff --git a/etc/profile-a-l/enox.profile b/etc/profile-a-l/enox.profile
index ef766c654..0199fcf34 100644
--- a/etc/profile-a-l/enox.profile
+++ b/etc/profile-a-l/enox.profile
@@ -6,6 +6,8 @@ include enox.local
 include globals.local
 
 # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
+ignore whitelist /usr/share/mozilla/extensions
+ignore whitelist /usr/share/webext
 ignore include whitelist-runuser-common.inc
 ignore include whitelist-usr-share-common.inc
 
diff --git a/etc/profile-a-l/flashpeak-slimjet.profile b/etc/profile-a-l/flashpeak-slimjet.profile
index 317a20bb7..90683675c 100644
--- a/etc/profile-a-l/flashpeak-slimjet.profile
+++ b/etc/profile-a-l/flashpeak-slimjet.profile
@@ -6,6 +6,8 @@ include flashpeak-slimjet.local
 include globals.local
 
 # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
+ignore whitelist /usr/share/mozilla/extensions
+ignore whitelist /usr/share/webext
 ignore include whitelist-runuser-common.inc
 ignore include whitelist-usr-share-common.inc
 
diff --git a/etc/profile-a-l/google-chrome-beta.profile b/etc/profile-a-l/google-chrome-beta.profile
index fed227b06..72766085a 100644
--- a/etc/profile-a-l/google-chrome-beta.profile
+++ b/etc/profile-a-l/google-chrome-beta.profile
@@ -6,6 +6,8 @@ include google-chrome-beta.local
 include globals.local
 
 # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
+ignore whitelist /usr/share/mozilla/extensions
+ignore whitelist /usr/share/webext
 ignore include whitelist-runuser-common.inc
 ignore include whitelist-usr-share-common.inc
 
diff --git a/etc/profile-a-l/google-chrome-unstable.profile b/etc/profile-a-l/google-chrome-unstable.profile
index 91962c62a..b8ded94d3 100644
--- a/etc/profile-a-l/google-chrome-unstable.profile
+++ b/etc/profile-a-l/google-chrome-unstable.profile
@@ -6,6 +6,8 @@ include google-chrome-unstable.local
 include globals.local
 
 # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
+ignore whitelist /usr/share/mozilla/extensions
+ignore whitelist /usr/share/webext
 ignore include whitelist-runuser-common.inc
 ignore include whitelist-usr-share-common.inc
 
diff --git a/etc/profile-a-l/google-chrome.profile b/etc/profile-a-l/google-chrome.profile
index 7a4cb5fc9..6de1405ee 100644
--- a/etc/profile-a-l/google-chrome.profile
+++ b/etc/profile-a-l/google-chrome.profile
@@ -6,6 +6,8 @@ include google-chrome.local
 include globals.local
 
 # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
+ignore whitelist /usr/share/mozilla/extensions
+ignore whitelist /usr/share/webext
 ignore include whitelist-runuser-common.inc
 ignore include whitelist-usr-share-common.inc
 
diff --git a/etc/profile-a-l/inox.profile b/etc/profile-a-l/inox.profile
index a5cac12f2..5f0ea7c74 100644
--- a/etc/profile-a-l/inox.profile
+++ b/etc/profile-a-l/inox.profile
@@ -6,7 +6,8 @@ include inox.local
 include globals.local
 
 # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
-ignore whitelist /usr/share/chromium
+ignore whitelist /usr/share/mozilla/extensions
+ignore whitelist /usr/share/webext
 ignore include whitelist-runuser-common.inc
 ignore include whitelist-usr-share-common.inc
 
diff --git a/etc/profile-m-z/snox.profile b/etc/profile-m-z/snox.profile
index 9d3ed8c1a..ce2b715bb 100644
--- a/etc/profile-m-z/snox.profile
+++ b/etc/profile-m-z/snox.profile
@@ -6,6 +6,8 @@ include snox.local
 include globals.local
 
 # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
+ignore whitelist /usr/share/mozilla/extensions
+ignore whitelist /usr/share/webext
 ignore include whitelist-runuser-common.inc
 ignore include whitelist-usr-share-common.inc
 
diff --git a/etc/profile-m-z/yandex-browser.profile b/etc/profile-m-z/yandex-browser.profile
index 3ae6b1cf0..ca2018903 100644
--- a/etc/profile-m-z/yandex-browser.profile
+++ b/etc/profile-m-z/yandex-browser.profile
@@ -6,6 +6,8 @@ include yandex-browser.local
 include globals.local
 
 # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
+ignore whitelist /usr/share/mozilla/extensions
+ignore whitelist /usr/share/webext
 ignore include whitelist-runuser-common.inc
 ignore include whitelist-usr-share-common.inc
 
diff --git a/etc/templates/profile.template b/etc/templates/profile.template
index aefb75c2c..28339765f 100644
--- a/etc/templates/profile.template
+++ b/etc/templates/profile.template
@@ -106,7 +106,7 @@ include globals.local
 #blacklist ${RUNUSER}/wayland-*
 # Disable RUNUSER (cli only; supersedes Disable Wayland)
 #blacklist ${RUNUSER}
-# Remove the next blacklist if you system has no /usr/libexec dir,
+# Remove the next blacklist if your system has no /usr/libexec dir,
 # otherwise try to add it.
 #blacklist /usr/libexec