[apparmor] Firefox 60 sys_admin capability

[Vincas Dargis]

On 5/18/18 6:25 PM, Malte Gell wrote:
> Hi there,
> 
> I just upgraded from Firefox 52 to version 60.
> I start Firefox always with the profile manager.
> Now, FF 60 asks for sys_admin capability.
> 
> Unless I know why, I´m reluctant to grant them....
> 
> Does anyone have a clue why FF 60 needs sys_admin capabilities?
> 
> Addons are locally stored in user folders, thus, updating addons can´t
> be the reason....
> 
> Thanx!
> 

It's something about sandboxing it's content processors:
https://www.morbo.org/2018/05/linux-sandboxing-improvements-in_10.html