2 files changed, 2 insertions, 2 deletions

diff --git a/etc/profile-a-l/firefox-common.profile b/etc/profile-a-l/firefox-common.profile
index 557e3559b..cb0fae5dc 100644
--- a/etc/profile-a-l/firefox-common.profile
+++ b/etc/profile-a-l/firefox-common.profile
@@ -14,7 +14,6 @@ include firefox-common.local
 
 nodeny  ${HOME}/.pki
 nodeny  ${HOME}/.local/share/pki
-nodeny  ${RUNUSER}/*firefox* # location of profiles if profile-sync-daemon is used
 
 include disable-common.inc
 include disable-devel.inc
@@ -27,7 +26,6 @@ mkdir ${HOME}/.local/share/pki
 allow  ${DOWNLOADS}
 allow  ${HOME}/.pki
 allow  ${HOME}/.local/share/pki
-allow ${RUNUSER}/*firefox*
 include whitelist-common.inc
 include whitelist-runuser-common.inc
 include whitelist-var-common.inc
diff --git a/etc/profile-a-l/firefox.profile b/etc/profile-a-l/firefox.profile
index 8acfe7c2a..93d32d141 100644
--- a/etc/profile-a-l/firefox.profile
+++ b/etc/profile-a-l/firefox.profile
@@ -16,6 +16,7 @@ include globals.local
 
 nodeny  ${HOME}/.cache/mozilla
 nodeny  ${HOME}/.mozilla
+nodeny  ${RUNUSER}/*firefox* # location of profiles if profile-sync-daemon is used
 
 deny  /usr/libexec
 
@@ -35,6 +36,7 @@ allow  /usr/share/gnome-shell/search-providers/firefox-search-provider.ini
 allow  /usr/share/gtk-doc/html
 allow  /usr/share/mozilla
 allow  /usr/share/webext
+allow  ${RUNUSER}/*firefox*
 include whitelist-usr-share-common.inc
 
 # firefox requires a shell to launch on Arch - add the next line to your firefox.local to enable private-bin.