404 page regarding Waterfox on Linux

[cnovel]

What happened?

Reproduction step Install Waterfox on Linux using Flatpak Launch Waterfox A banner below the adress bar warns the user: "Some of Waterfox's security features may offer less protection on your current operating system. How to fix this issue."

The link is a 404, and should be https://www.waterfox.net/support/install-waterfox-linux/ I guess.

System information Linux Mint 22.1 / Waterfox 6.5.3

Reproducible?

• [x] I have checked that this issue cannot be reproduced on Mozilla Firefox.

Version

G6

What platform are you seeing the problem on?

Linux

Relevant log output

[cnovel]

Also, the likely page candidate does not give any details about the security features and why it would offer less protection. I've looked in the documentation and couldn't find any relevant page. Should I raise another issue about this?

[aditya95sriram]

Seems like they might be referring to this Firefox support article.

You may see a warning that “some of Firefox’s security features may offer less protection on your current operating system”. The sandbox in Firefox makes use of unprivileged user namespaces when creating new processes for enforcing more security. This can be considered a security risk, therefore some Linux distributions have started to restrict its usage and only allow it to work where there is an AppArmor profile. ... (goes on to explain how to create an AppArmor profile for firefox)

[SHiLLySiT]

Just wanted to add to aditya95sriram's comment: the Firefox support article they linked to links out to this page which has the instructions on how to fix this issue.

I only had to do one additional step (since the instructions are for Firefox, not Waterfox) which was to replace all instances of firefox with waterfox:

# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"
abi <abi/4.0>,
include <tunables/global>
profile waterfox-local
/home/<user>/bin/waterfox/{waterfox,waterfox-bin,updater}
flags=(unconfined) {
        userns,
        # Site-specific additions and overrides. See local/README for details.
        include if exists <local/firefox>
}

[amphyvi]

I got it working, some extra information over on the PWAsForFirefox page happened to be a big help.

I had to sudo nano waterfox inside /etc/apparmor.d with the following contents, as Waterfox installs in /usr/lib/waterfox:

# application a name instead of having the label "unconfined"

abi <abi/4.0>,
include <tunables/global>

profile waterfox /usr/lib/waterfox/{waterfox,waterfox-bin,updater} flags=(unconfined) {
  userns,

  # Site-specific additions and overrides. See local/README for details.
  include if exists <local/firefox>
}

[pospi]

Is the warning supposed to go away after doing this? Mine doesn't, not even after a full reboot.

[amphyvi]

It went away for me when I did it. If your Waterfox is installing to the same path (/usr/lib/waterfox), then what I wrote back then should theoretically help, but it's also been 6 months since I last looked at this issue