Resolves: #2037103 Enable addons with sha1 signatures on rhel9 too

firefox.spec

@@ -129,7 +129,7 @@ end}
 Summary:        Mozilla Firefox Web browser
 Name:           firefox
 Version:        91.6.0
-Release:        1%{?dist}
+Release:        2%{?dist}
 URL:            https://www.mozilla.org/firefox/
 License:        MPLv1.1 or GPLv2+ or LGPLv2+
 %if 0%{?rhel} == 9
@@ -435,6 +435,10 @@ echo "use_rustts            %{?use_rustts}"
 %patch225 -p1 -b .firefox-nss-addon-hack
 %endif
 
+%if 0%{?rhel} >= 9
+%patch225 -p1 -b .firefox-nss-addon-hack
+%endif
+
 # Patch for big endian platforms only
 %if 0%{?big_endian}
 %endif
@@ -1257,6 +1261,9 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 #---------------------------------------------------------------------
 
 %changelog
+* Wed Feb 09 2022 Jan Horak <jhorak@redhat.com> - 91.6.0-2
+- Enable addon installation on rhel9
+
 * Wed Feb 02 2022 Eike Rathke <erack@redhat.com> - 91.6.0-1
 - Update to 91.6.0 build1
 

rpminspect.yaml

@@ -7,5 +7,5 @@ badfuncs:
 # We don't plan to build Firefox with the LTO because it brings more problems
 # than benefits to the package.
 annocheck:
-  - rhel-policy: --ignore-unknown --verbose --skip-lto --skip-cf-protection --skip-property-note
+  - hardened: --ignore-unknown --verbose --skip-lto --skip-cf-protection --skip-property-note