fineid: note that Firefox policies allows deploying this for all users

.pre-commit-config.yaml

@@ -60,7 +60,7 @@ repos:
         args: [--update-only, --notitle]
 
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.28.2
+    rev: 0.28.3
     hooks:
       #- id: check-dependabot
       #- id: check-github-actions

DNS/blocklist.txt

@@ -1,6 +1,6 @@
-# Version: 202307111415
+# Version: 202405140842
 # Description: Aminda gist blocklist test
-# Title: Aminda gist
+# Title: Aminda's small blocklist
 # Last modified: 2023-07-11T14:15:00+0300
 # Expires: 24 hours
 # Syntax: Domains (wildcards)
@@ -11,3 +11,11 @@ google-analytics.com
 *.ssl.google-analytics.com
 matrix.to
 graph.facebook.com
+fritz.box
+mywifiext.net
+tplinkrepeater.net
+router.asus.com
+*.fritz.box
+*.mywifiext.net
+*.tplinkrepeater.net
+*.router.asus.com

fineid/README.md

@@ -5,6 +5,7 @@
   - [Requirements for everything](#requirements-for-everything)
   - [Chromium](#chromium)
   - [Firefox and Thunderbird](#firefox-and-thunderbird)
+    - [Firefox policy](#firefox-policy)
   - [Okular](#okular)
     - [Validation](#validation)
   - [Root certificates](#root-certificates)
@@ -58,6 +59,27 @@ In Settings, Advanced, Security devices load the module from (DVV app) `/usr/lib
 `onepin` is a workaround to not ask for PIN2 which is only used for legal agreements,
 email signing also uses PIN1.
 
+### Firefox policy
+
+Firefox organizational policy can also be used for this, Thunderbird likely
+has one too. It will affect all users and instances of the application on the
+computer.
+
+In the file `/etc/firefox/policies/policies.json` which must be created if it
+doesn't exist:
+
+```json
+{
+  "policies": {
+    "SecurityDevices": {
+      "Add": {
+        "Fujitsu mPollux DigiSignApplication": "/usr/lib64/libcryptoki.so"
+      }
+    }
+  }
+}
+```
+
 ## Okular
 
 Okular is the KDE document viewer and supports signing PDF files using FINEID!