feat(profile): firefox: improve crashreporter.

apparmor.d/groups/browsers/firefox-crashhelper

@@ -12,7 +12,7 @@ include <tunables/global>
 @{cache_dirs} = @{user_cache_dirs}/mozilla/
 
 @{exec_path} = @{lib_dirs}/crashhelper
-profile firefox-crashhelper @{exec_path} {
+profile firefox-crashhelper @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
 
   @{exec_path} mr,

apparmor.d/groups/browsers/firefox-crashreporter

@@ -28,22 +28,23 @@ profile firefox-crashreporter @{exec_path} flags=(attach_disconnected) {
   network inet6 stream,
   network netlink raw,
 
-  @{exec_path} mr,
+  @{exec_path} mrix,
 
   @{bin}/curl rix,
   @{bin}/mv   rix,
 
   @{lib_dirs}/minidump-analyzer rPx,
 
-  @{bin}/mv rix,
-
   owner "@{config_dirs}/firefox/Crash Reports/{,**}" rw,
   owner @{config_dirs}/firefox/*.*/crashes/{,**} rw,
   owner @{config_dirs}/firefox/*.*/crashes/events/@{uuid} rw,
   owner @{config_dirs}/firefox/*.*/extensions/*.xpi r,
   owner @{config_dirs}/firefox/*.*/minidumps/{,**} rw,
   owner @{config_dirs}/firefox/*.*/minidumps//@{uuid}.{dmp,extra} r,
+  owner @{config_dirs}/firefox/*.*/prefs.js r,
+  owner @{config_dirs}/firefox/*.*/storage-sync-v2.sqlite-shm r,
   owner @{config_dirs}/firefox/*.*/storage/default/* r,
+  owner @{config_dirs}/firefox/Profile*/*.sqlite-shm r,
 
   owner @{cache_dirs}/firefox/*.*/** r,
 
@@ -54,10 +55,14 @@ profile firefox-crashreporter @{exec_path} flags=(attach_disconnected) {
 
   owner /dev/shm/org.mozilla.ipc.@{int}.@{int} r,
 
+  owner @{PROC}/@{pid}/cgroup r,
   owner @{PROC}/@{pid}/cmdline r,
+  owner @{PROC}/@{pid}/mountinfo r,
 
   /dev/dri/card@{int} rw,
   /dev/dri/renderD128 rw,
+  /dev/nvidia@{int} r,
+  /dev/nvidiactl r,
 
   # Silencer
   deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,