profiles: blink-common-hardened: fix u2f

udev rules may set permissions in /dev/... to enable ordinary users to access the hardware token. This fix checks whether u2f is enabled in firejail.config in order to keep this permission change inside the sandbox.
netblue30 · Feb 25, 2025 · 5bd98fa · 5bd98fa
1 parent a78cdcd
commit 5bd98fa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/etc/profile-a-l/blink-common-hardened.inc.profile b/etc/profile-a-l/blink-common-hardened.inc.profile
@@ -4,7 +4,7 @@ include blink-common-hardened.inc.local
 
 caps.drop all
 nonewprivs
-noroot
+?BROWSER_DISABLE_U2F: noroot
 protocol unix,inet,inet6,netlink
 seccomp !chroot