The new firefox profile has moved all but 3 Ux out into the apparmor ubuntu-browsers.d abstractions. The sanitizied_helper workaround has been applied to those abstractions already, and the 3 Ux's in the firefox profile are simple utilities (ps, uname and mkfifo). Since they are ELF binaries, they will benefit from glibc's secure execute and can't be used to fork off children, so I am going to mark the firefox task as 'Invalid'.
The new firefox profile has moved all but 3 Ux out into the apparmor ubuntu-browsers.d abstractions. The sanitizied_helper workaround has been applied to those abstractions already, and the 3 Ux's in the firefox profile are simple utilities (ps, uname and mkfifo). Since they are ELF binaries, they will benefit from glibc's secure execute and can't be used to fork off children, so I am going to mark the firefox task as 'Invalid'.