From ad4a9295ea2b78424fa071876bbfb1bbbb8b0e25 Mon Sep 17 00:00:00 2001
From: Mariusz Marciniak <mariusz.marciniak.pl@gmail.com>
Date: Fri, 19 Sep 2025 21:44:54 +0000
Subject: [PATCH] KASM-7297 "Smartcard container"

---
 src/ubuntu/install/firefox/install_firefox.sh | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/ubuntu/install/firefox/install_firefox.sh b/src/ubuntu/install/firefox/install_firefox.sh
index b465c12..a1adabf 100644
--- a/src/ubuntu/install/firefox/install_firefox.sh
+++ b/src/ubuntu/install/firefox/install_firefox.sh
@@ -180,6 +180,13 @@ fi
 echo 'user_pref("security.sandbox.warn_unprivileged_namespaces", false);' > $HOME/.mozilla/firefox/kasm/user.js
 chown 1000:1000 $HOME/.mozilla/firefox/kasm/user.js
 
+# configure smartcard support
+# note: some firefox versions don't read from the global pkcs11.txt when creating profiles
+if [[ ${KASM_SVC_SMARTCARD:-1} == 1 ]] && [ -f "$HOME/.pki/nssdb/pkcs11.txt" ]; then
+    cp $HOME/.pki/nssdb/pkcs11.txt $HOME/.mozilla/firefox/kasm/pkcs11.txt
+    chown 1000:1000 $HOME/.mozilla/firefox/kasm/pkcs11.txt
+fi
+
 if [[ "${DISTRO}" == @(oracle8|rockylinux9|rockylinux8|oracle9|rhel9|almalinux9|almalinux8|opensuse|fedora39|fedora40|fedora41) ]]; then
   set_desktop_icon
 fi