[Bug 1951646] [NEW] [snap] Firefox unable to load Security Device "p11-kit-trust.so" defined in /etc/firefox/policies/policies.json

[Marcos Simental]

Public bug reported:

Environment:
Ubuntu 21.10 with default Firefox (v93.0) snap install.

Having defined a policy in /etc/firefox/policies/policies.json with the following:
$ cat /etc/firefox/policies/policies.json 
{
    "policies": {
        "Authentication": {
            "Delegated": [
                "example.com"
            ],
            "NTLM": [
                "example.com"
            ],
            "SPNEGO": [
                "example.com"
            ],
            "Locked": false
        },
        "Homepage": {
            "URL": "https://example.com",
            "Locked": false
        },
        "Proxy": {
            "Mode": "system",
            "Passthrough": "<local>,.example.com,
            "Locked": false
        },
        "SecurityDevices": {
            "p11-kit-trust.so for Internal certificate chain": "/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so"
        }
    }
}

I got an error when looking over about:policies:
"Unable to load security device p11-kit-trust.so"
However, all other policies are active and applied correctly (meaning that snap firefox can load /etc/firefox/policies/policies.json file).

After enabling debug for policies I get the following error:
Policies.jsm: 
Exception { name: "NS_ERROR_FAILURE", message: "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIPKCS11ModuleDB.addModule]", result: 2147500037, filename: "resource:///modules/policies/Policies.jsm", lineNumber: 1995, columnNumber: 0, data: null, stack: "onProfileAfterChange at resource:///modules/policies/Policies.jsm:1995:20\n_runPoliciesCallbacks at resource://gre/modules/EnterprisePoliciesParent.jsm:238:9\nBG_observe at resource://gre/modules/EnterprisePoliciesParent.jsm:291:14\n", location: XPCWrappedNative_NoHelper }
Policies.jsm:1998


I tried to reproduce with the firefox.deb package without success, so the problem might be around snap.

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1951646

Title:
  [snap] Firefox unable to load Security Device "p11-kit-trust.so"
  defined in /etc/firefox/policies/policies.json

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1951646/+subscriptions