From ef1cc5c75e39908ee34d366f40364bdf0e7a24d3 Mon Sep 17 00:00:00 2001
From: Victor Lavaud <victor.lavaud@pm.me>
Date: Sun, 23 Jun 2024 08:18:48 +0200
Subject: [PATCH] profiles: keepassxc: document new socket location

The KeePassXC browser extension looks for the KeePassXC socket at
`${RUNUSER}/app/org.keepassxc.KeePassXC`[1].

But `${RUNUSER}/app` seems to be blacklisted in disable-common.inc under the
flatpak section[2], so the KeePassXC extension cannot connect to it.

Fixes #5447.

[1] https://github.com/keepassxreboot/keepassxc/blob/6b1ab1a5edd66ac10706a2fb5af34ec9458a901d/src/browser/BrowserShared.cpp#L41
[2] https://github.com/netblue30/firejail/blob/b89ec818926b4bcd3a58bb4e2a67b68a8090ba1c/etc/inc/disable-common.inc#L667
---
 etc/profile-a-l/cachy-browser.profile | 1 +
 etc/profile-a-l/floorp.profile        | 1 +
 etc/profile-a-l/librewolf.profile     | 1 +
 3 files changed, 3 insertions(+)

diff --git a/etc/profile-a-l/cachy-browser.profile b/etc/profile-a-l/cachy-browser.profile
index 05e1a69f1b8..99e0fa8c460 100644
--- a/etc/profile-a-l/cachy-browser.profile
+++ b/etc/profile-a-l/cachy-browser.profile
@@ -23,6 +23,7 @@ whitelist /usr/share/cachy-browser
 # Note: Start KeePassXC before CachyBrowser and keep it open to allow communication between them.
 #whitelist ${RUNUSER}/kpxc_server
 #whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
+#noblacklist ${RUNUSER}/app
 
 # Add the next line to your cachy-browser.local to enable private-bin (Arch Linux).
 #private-bin dbus-launch,dbus-send,cachy-browser,sh
diff --git a/etc/profile-a-l/floorp.profile b/etc/profile-a-l/floorp.profile
index 49caed107f4..326ef207b41 100644
--- a/etc/profile-a-l/floorp.profile
+++ b/etc/profile-a-l/floorp.profile
@@ -22,6 +22,7 @@ whitelist ${HOME}/.floorp
 # Note: Start KeePassXC before floorp and keep it open to allow communication between them.
 #whitelist ${RUNUSER}/kpxc_server
 #whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
+#noblacklist ${RUNUSER}/app
 
 dbus-user filter
 dbus-user.own org.mozilla.floorp.*
diff --git a/etc/profile-a-l/librewolf.profile b/etc/profile-a-l/librewolf.profile
index 65a4a378796..2f3d3ea9351 100644
--- a/etc/profile-a-l/librewolf.profile
+++ b/etc/profile-a-l/librewolf.profile
@@ -22,6 +22,7 @@ whitelist ${HOME}/.librewolf
 # Note: Start KeePassXC before Librewolf and keep it open to allow communication between them.
 #whitelist ${RUNUSER}/kpxc_server
 #whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
+#noblacklist ${RUNUSER}/app
 
 whitelist /usr/share/librewolf