Motivation for this change

Update and fix #24542 and netblue30/firejail#1098: When a Firejail profile uses a whitelist it is necessary to whitelist ~/.nix-profile as well. However because ~/.nix-profile is a symlink to the Nix store which is owned by root, by default Firejail does not read it. In Firejail version 0.9.46 the option follow-symlink-as-user was introduced to address this problem.

Things done

Please check what applies. Note that these are not hard requirements but mereley serve as information for reviewers.

• Tested using sandboxing
  (nix.useSandbox on NixOS,
  or option build-use-sandbox in nix.conf
  on non-NixOS)
• Built on platform(s)
  • NixOS
  • macOS
  • Linux
• Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
• Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
• Tested execution of all binary files (usually in ./result/bin/)
• Fits CONTRIBUTING.md.

cc @lheckemann @tilpner @tex @r-raymond @7c6f434c