1 From: meissner@suse.com

     2 Subject: allow Firefox to access addtional process information

     3 Reference: http://bugzilla.suse.com/show_bug.cgi?id=1167132

     4 

     5 Index: firefox-74.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp

     6 ===================================================================

     7 --- firefox-74.0.orig/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp

     8 +++ firefox-74.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp

     9 @@ -276,6 +276,7 @@ SandboxBrokerPolicyFactory::SandboxBroke

    10  

    11    // Read permissions

    12    policy->AddPath(rdonly, "/dev/urandom");

    13 +  policy->AddPath(rdonly, "/proc/sys/crypto/fips_enabled");

    14    policy->AddPath(rdonly, "/proc/cpuinfo");

    15    policy->AddPath(rdonly, "/proc/meminfo");

    16    policy->AddDir(rdonly, "/sys/devices/cpu");