Public bug reported:
Environment:
Ubuntu 21.10 with default Firefox (v93.0) snap install.
Having defined a policy in /etc/firefox/policies/policies.json with the
following:
$ cat /etc/firefox/policies/policies.json
{
"policies": {
"Authentication": {
"Delegated": [
"example.com"
],
"NTLM": [
"example.com"
],
"SPNEGO": [
"example.com"
],
"Locked": false
},
"Homepage": {
"URL": "https://example.com";,
"Locked": false
},
"Proxy": {
"Mode": "system",
"Passthrough": "<local>,.example.com,
"Locked": false
},
"SecurityDevices": {
"p11-kit-trust.so for Internal certificate chain":
"/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so"
}
}
}
I got an error when looking over about:policies:
"Unable to load security device p11-kit-trust.so"
However, all other policies are active and applied correctly (meaning that snap
firefox can load /etc/firefox/policies/policies.json file).
After enabling debug for policies I get the following error:
Policies.jsm:
Exception { name: "NS_ERROR_FAILURE", message: "Component returned failure
code: 0x80004005 (NS_ERROR_FAILURE) [nsIPKCS11ModuleDB.addModule]", result:
2147500037, filename: "resource:///modules/policies/Policies.jsm", lineNumber:
1995, columnNumber: 0, data: null, stack:
"onProfileAfterChange@resource:///modules/policies/Policies.jsm:1995:20\n_runPoliciesCallbacks@resource://gre/modules/EnterprisePoliciesParent.jsm:238:9\nBG_observe@resource://gre/modules/EnterprisePoliciesParent.jsm:291:14\n",
location: XPCWrappedNative_NoHelper }
Policies.jsm:1998
I tried to reproduce with the firefox.deb package without success, so the
problem might be around snap.
** Affects: firefox (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1951646
Title:
[snap] Firefox unable to load Security Device "p11-kit-trust.so"
defined in /etc/firefox/policies/policies.json
Status in firefox package in Ubuntu:
New
Bug description:
Environment:
Ubuntu 21.10 with default Firefox (v93.0) snap install.
Having defined a policy in /etc/firefox/policies/policies.json with the
following:
$ cat /etc/firefox/policies/policies.json
{
"policies": {
"Authentication": {
"Delegated": [
"example.com"
],
"NTLM": [
"example.com"
],
"SPNEGO": [
"example.com"
],
"Locked": false
},
"Homepage": {
"URL": "https://example.com";,
"Locked": false
},
"Proxy": {
"Mode": "system",
"Passthrough": "<local>,.example.com,
"Locked": false
},
"SecurityDevices": {
"p11-kit-trust.so for Internal certificate chain":
"/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so"
}
}
}
I got an error when looking over about:policies:
"Unable to load security device p11-kit-trust.so"
However, all other policies are active and applied correctly (meaning that
snap firefox can load /etc/firefox/policies/policies.json file).
After enabling debug for policies I get the following error:
Policies.jsm:
Exception { name: "NS_ERROR_FAILURE", message: "Component returned failure
code: 0x80004005 (NS_ERROR_FAILURE) [nsIPKCS11ModuleDB.addModule]", result:
2147500037, filename: "resource:///modules/policies/Policies.jsm", lineNumber:
1995, columnNumber: 0, data: null, stack:
"onProfileAfterChange@resource:///modules/policies/Policies.jsm:1995:20\n_runPoliciesCallbacks@resource://gre/modules/EnterprisePoliciesParent.jsm:238:9\nBG_observe@resource://gre/modules/EnterprisePoliciesParent.jsm:291:14\n",
location: XPCWrappedNative_NoHelper }
Policies.jsm:1998
I tried to reproduce with the firefox.deb package without success, so the
problem might be around snap.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1951646/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
