firefox-common-addons: fix whitelisting in ${RUNUSER} (#5497)

* fix whitelisting in ${RUNUSER}

See discussions https://github.com/netblue30/firejail/discussions/5495 for context.

* Prevent whitelisting ${RUNUSER} comment

1 files changed, 5 insertions, 0 deletions

diff --git a/etc/profile-a-l/firefox-common-addons.profile b/etc/profile-a-l/firefox-common-addons.profile
index b2b7c362a..6dc1fca8a 100644
--- a/etc/profile-a-l/firefox-common-addons.profile
+++ b/etc/profile-a-l/firefox-common-addons.profile
@@ -2,8 +2,13 @@
 # Persistent customizations should go in a .local file.
 include firefox-common-addons.local
 
+# Prevent whitelisting in ${RUNUSER}
 ignore whitelist ${RUNUSER}/*firefox*
+ignore whitelist ${RUNUSER}/psd/*firefox*
+ignore whitelist ${RUNUSER}/kpxc_server
+ignore whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
 ignore include whitelist-runuser-common.inc
+
 ignore private-cache
 
 noblacklist ${HOME}/.cache/youtube-dl