There is a further observation: even though a valid permissions.sqlite file is there (as demonstrated by the TB build from Mozilla.org, and it can also be read without problems with sqlitebrowser for example), TB on SUSE does not only not store new exceptions, but it also fails to read the existing exceptions from permissions.sqlite - opening the preferences dialogue shows an empty exceptions list. File permissions are -rw-r--r-- permissions.sqlite