PS. security.sandbox.content.read_path_whitelist works. Need to add /sys/ (with trailing slash, as https://wiki.mozilla.org/Security/Sandbox says), and restart Firefox.