Comment 5 for bug 1930769

Revision history for this message
Stefan (stefan2904) wrote (last edit ):

I was also affected by this bug (on Ubuntu 22.04.2 LTS with the latest Firefox 112.0.1 from ppa:mozillateam). I don't want to use the snap version of Firefox.

After digging around in AppArmor audit mode and inspecting the logs I noticed that torbrowser (also based on Firefox) has a set of rule in its profile that seem to resolve the issue:

/etc/apparmor.d/usr.bin.firefox
```
  # u2f (tested with Yubikey 4)
  /sys/class/ r,
  /sys/bus/ r,
  /sys/class/hidraw/ r,
  /run/udev/data/c24{7,9}:* r,
  /dev/hidraw* rw,
  # Yubikey NEO also needs this:
  /sys/devices/**/hidraw/hidraw*/uevent r,
```

(I am not sure to what extend other tokens need different rules.)