From 603f77cdf0fc8a253535067669d77f77b099b36b Mon Sep 17 00:00:00 2001
From: northboot <northboot@mailbox.org>
Date: Tue, 25 Feb 2025 01:20:26 +0100
Subject: [PATCH] profiles: blink-common: fix u2f

udev rules may set permissions in /dev/... to enable ordinary users to
access the hardware token.
This fix checks whether u2f is enabled in firejail.config in order to
keep this permission change inside the sandbox.
---
 etc/profile-a-l/blink-common.profile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/etc/profile-a-l/blink-common.profile b/etc/profile-a-l/blink-common.profile
index ff17dc47963..bdc28530569 100644
--- a/etc/profile-a-l/blink-common.profile
+++ b/etc/profile-a-l/blink-common.profile
@@ -30,7 +30,7 @@ apparmor
 caps.keep sys_admin,sys_chroot
 netfilter
 nodvd
-nogroups
+?BROWSER_DISABLE_U2F: nogroups
 noinput
 notv