[Bug 1930769] Re: When enabled, Firefox AppArmor profile prevents U2F devices from working

[Stefan]

I was also affected by this bug (on Ubuntu 22.04.2 LTS with the latest
Firefox 112.0.1 from ppa:mozillateam). I don't want to use the snap
version of Firefox.


After digging around in AppArmor audit mode and inspecting the logs I noticed that torbrowser (also based on Firefox) has a set of rule in its profile that seem to resolve the issue:


/etc/apparmor.d/usr.bin.firefox 
```
  # u2f (tested with Yubikey 4)
  /sys/class/ r,
  /sys/bus/ r,
  /sys/class/hidraw/ r,
  /run/udev/data/c24{7,9}:* r,
  /dev/hidraw* rw,
  # Yubikey NEO also needs this:
  /sys/devices/**/hidraw/hidraw*/uevent r,
```


(I am not sure to what extend other tokens need different rules.)

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1930769

Title:
  When enabled, Firefox AppArmor profile prevents U2F devices from
  working

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1930769/+subscriptions