From a703aced6cbb22aa690728a65b0d85e67f973bf4 Mon Sep 17 00:00:00 2001
From: Rene Engelhard <rene@debian.org>
Date: Mon, 19 Feb 2018 18:57:19 +0100
Subject: apparmor: allow cert9.db

... as used by firefox >= 58

Change-Id: I2769020327d3d097f734ab2c152bee2474b99767
---
 sysui/desktop/apparmor/program.soffice.bin | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'sysui/desktop/apparmor')

diff --git a/sysui/desktop/apparmor/program.soffice.bin b/sysui/desktop/apparmor/program.soffice.bin
index 3a18e7e1c13e..dc0eedefee79 100644
--- a/sysui/desktop/apparmor/program.soffice.bin
+++ b/sysui/desktop/apparmor/program.soffice.bin
@@ -177,7 +177,10 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin {
 
   owner @{HOME}/.mozilla/firefox/profiles.ini r,
   owner @{HOME}/.mozilla/firefox/*/secmod.db r,
+  # firefox < 58
   owner @{HOME}/.mozilla/firefox/*/cert8.db r,
+  # firefox >= 58
+  owner @{HOME}/.mozilla/firefox/*/cert9.db r,
   # there is abstractions/gnupg but that's just for gpg1...
   profile gpg {
     #include <abstractions/base>
-- 
cgit