diff --git a/pkg/storaged/storage-controls.jsx b/pkg/storaged/storage-controls.jsx
index bdddcf0bcbc..d9a03a08e90 100644
--- a/pkg/storaged/storage-controls.jsx
+++ b/pkg/storaged/storage-controls.jsx
@@ -120,7 +120,6 @@ export const StorageButton = ({ id, kind, excuse, onClick, children, ariaLabel,
                                        onClick={checked(onClick, setSpinning)}
                                        variant={kind || "secondary"}
                                        isDisabled={!!excuse || (spinner && spinning)}
-                                       style={excuse ? { pointerEvents: 'none' } : null}
                                        isLoading={spinner ? spinning : undefined}>
                                    {children}
                                </Button>
@@ -131,7 +130,6 @@ export const StorageLink = ({ id, excuse, onClick, children }) => (
     <StorageControl excuse={excuse}
                     content={excuse => (
                         <Button onClick={checked(onClick)}
-                                style={excuse ? { pointerEvents: 'none' } : null}
                                 variant="link"
                                 isInline
                                 isDisabled={!!excuse}>
diff --git a/test/common/test-functions.js b/test/common/test-functions.js
index cdb4d174c15..3f944a7796c 100644
--- a/test/common/test-functions.js
+++ b/test/common/test-functions.js
@@ -28,6 +28,19 @@ window.ph_find = function(sel) {
     return window.ph_only(els, sel);
 };
 
+window.ph_find_scroll_into_view = function(sel) {
+    const el = window.ph_find(sel);
+    /* we cannot make this conditional, as there is no way to find out whether
+       an element is currently visible -- the usual trick to compare getBoundingClientRect() against
+       window.innerHeight does not work if the element is in e.g. a scrollable dialog area */
+    return new Promise(resolve => {
+        el.scrollIntoView({ behaviour: 'instant', block: 'center', inline: 'center' });
+        // scrolling needs a little bit of time to stabilize, and it's not predictable
+        // in particular, 'scrollend' is not reliably emitted
+        window.setTimeout(() => resolve(el), 200);
+    });
+};
+
 window.ph_count = function(sel) {
     const els = window.ph_select(sel);
     return els.length;
diff --git a/test/common/testlib.py b/test/common/testlib.py
index ef84d10912e..39c80237953 100644
--- a/test/common/testlib.py
+++ b/test/common/testlib.py
@@ -114,6 +114,7 @@
     "ArrowDown": "\uE015",
     "Insert": "\uE016",
     "Delete": "\uE017",
+    "Meta": "\uE03D",
 }
 
 
@@ -502,7 +503,62 @@ def mouse(
         :param metaKey: press the meta key
         """
         self.wait_visible(selector)
-        self.call_js_func('ph_mouse', selector, event, x, y, btn, ctrlKey, shiftKey, altKey, metaKey)
+
+        # HACK: Chromium clicks don't work with iframes; use our old "synthesize MouseEvent" approach
+        # https://issues.chromium.org/issues/359616812
+        # TODO: x and y are not currently implemented: webdriver (0, 0) is the element's center, not top left corner
+        if self.browser == "chromium" or x != 0 or y != 0:
+            self.call_js_func('ph_mouse', selector, event, x, y, btn, ctrlKey, shiftKey, altKey, metaKey)
+            return
+
+        # For Firefox and regular clicks, use the BiDi API, which is more realistic -- it doesn't
+        # sidestep the browser
+        element = self.call_js_func('ph_find_scroll_into_view', selector)
+
+        actions = [{"type": "pointerMove", "x": 0, "y": 0, "origin": {"type": "element", "element": element}}]
+        down = {"type": "pointerDown", "button": btn}
+        up = {"type": "pointerUp", "button": btn}
+        if event == "click":
+            actions.extend([down, up])
+        elif event == "dblclick":
+            actions.extend([down, up, down, up])
+        elif event == "mouseenter":
+            actions.insert(0, {"type": "pointerMove", "x": 0, "y": 0, "origin": "viewport"})
+        elif event == "mouseleave":
+            actions.append({"type": "pointerMove", "x": 0, "y": 0, "origin": "viewport"})
+        else:
+            raise NotImplementedError(f"unknown event {event}")
+
+        # modifier keys
+        ev_id = f"pointer-{self.driver.last_id}"
+        keys_pre = []
+        keys_post = []
+
+        def key(type_: str, name: str) -> JsonObject:
+            return {"type": "key", "id": ev_id + type_, "actions": [{"type": type_, "value": WEBDRIVER_KEYS[name]}]}
+
+        if altKey:
+            keys_pre.append(key("keyDown", "Alt"))
+            keys_post.append(key("keyUp", "Alt"))
+        if ctrlKey:
+            keys_pre.append(key("keyDown", "Control"))
+            keys_post.append(key("keyUp", "Control"))
+        if shiftKey:
+            keys_pre.append(key("keyDown", "Shift"))
+            keys_post.append(key("keyUp", "Shift"))
+        if metaKey:
+            keys_pre.append(key("keyDown", "Meta"))
+            keys_post.append(key("keyUp", "Meta"))
+
+        # the actual mouse event
+        actions = [{
+            "id": ev_id,
+            "type": "pointer",
+            "parameters": {"pointerType": "mouse"},
+            "actions": actions,
+        }]
+
+        self.bidi("input.performActions", context=self.driver.context, actions=keys_pre + actions + keys_post)
 
     def click(self, selector: str) -> None:
         """Click on a ui element
diff --git a/test/verify/check-apps b/test/verify/check-apps
index 1e00615b751..5642bf13c9b 100755
--- a/test/verify/check-apps
+++ b/test/verify/check-apps
@@ -247,6 +247,7 @@ class TestApps(packagelib.PackageCase):
             b.wait_visible('#display-language-modal')
             b.click(f'#display-language-modal li[data-value={lang}] button')
             b.click("#display-language-modal footer button.pf-m-primary")
+            b.wait_not_present('#display-language-modal')
             b.wait_language(lang)
             b.enter_page("/apps")
 
diff --git a/test/verify/check-networkmanager-firewall b/test/verify/check-networkmanager-firewall
index b5b265c26bc..82e070e051d 100755
--- a/test/verify/check-networkmanager-firewall
+++ b/test/verify/check-networkmanager-firewall
@@ -336,8 +336,7 @@ class TestFirewall(netlib.NetworkCase):
         m.execute("firewall-cmd --add-service=pop3")
         b.wait_visible(".zone-section[data-id='public'] tr[data-row-id='pop3']")
         b.wait_visible(".zone-section[data-id='public'] td:contains('Additional ports') + td:contains('9998')")
-        # remove service via cli and cockpit
-        m.execute("firewall-cmd --remove-service=pop3")
+        # remove service in cockpit
         b.click(".zone-section[data-id='public'] tr[data-row-id='pop3'] button.pf-v5-c-menu-toggle")
         b.click(".zone-section[data-id='public'] .pf-v5-c-menu__list-item.pf-m-danger button")
         b.wait_not_present(".zone-section[data-id='public'] tr[data-row-id='pop3']")
diff --git a/test/verify/check-pages b/test/verify/check-pages
index ab98748a3e0..28c63f62c59 100755
--- a/test/verify/check-pages
+++ b/test/verify/check-pages
@@ -639,6 +639,9 @@ OnCalendar=daily
         time.sleep(1)
         b.input_text("stuff/")
         b.wait_in_text("#file-autocomplete-widget li:nth-of-type(5) button", "other")
+        # close the selector
+        b.click("#demo-file-ac input")
+        b.wait_not_present("#file-autocomplete-widget")
 
         # Create test folder with known files
         m.execute("mkdir /home/admin/newdir")
@@ -647,13 +650,21 @@ OnCalendar=daily
         m.execute("touch /home/admin/newdir/file1")
         m.execute("touch /home/admin/newdir/file2")
         # test pre-selected autocomplete widget
-        b.wait_val("div#demo-file-ac-preselected input", "/home/admin/newdir/file1")
-        b.click("div#demo-file-ac-preselected input")
-        b.click("div#demo-file-ac input")
-        b.click("div#demo-file-ac-preselected input")
+        b.wait_val("#demo-file-ac-preselected input", "/home/admin/newdir/file1")
+        # open the selector
+        b.click("#demo-file-ac-preselected input")
+        b.wait_visible("#file-autocomplete-widget-preselected")
+        # close and open again to reload the dir (which just got created)
+        b.click("#demo-file-ac-preselected input")
+        b.wait_not_present("#file-autocomplete-widget-preselected")
+        b.click("#demo-file-ac-preselected input")
+        # selection has all the files in the directory
         paths = ["/home/admin/newdir", "/home/admin/newdir/dir1", "/home/admin/newdir/dir2", "/home/admin/newdir/file1", "/home/admin/newdir/file2"]
         for i in range(5):
             b.wait_in_text(f"#file-autocomplete-widget-preselected li:nth-of-type({i + 1}) button", paths[i])
+        # clicking on input again hides selector dropdown again
+        b.click("#demo-file-ac-preselected input")
+        b.wait_not_present("#file-autocomplete-widget-preselected")
 
     @testlib.skipOstree("No PCP available")
     @testlib.skipImage("pcp not currently in testing", "debian-testing")
diff --git a/test/verify/check-superuser b/test/verify/check-superuser
index b9b4fc929ca..fb7b149a286 100755
--- a/test/verify/check-superuser
+++ b/test/verify/check-superuser
@@ -228,6 +228,8 @@ session include system-auth
         b.open_superuser_dialog()
         b.wait_in_text(".pf-v5-c-modal-box", "Password for admin")
         self.assertIn("cockpit-askpass", m.execute("loginctl --lines=0 user-status admin"))
+        b.click(".pf-v5-c-modal-box button:contains('Cancel')")
+        b.wait_not_present(".pf-v5-c-modal-box")
         b.logout()
         testlib.wait(lambda: "sudo" not in m.execute("loginctl --lines=0 user-status admin || true"), tries=10)
         self.assertNotIn("cockpit", m.execute("loginctl --lines=0 user-status admin || true"))
diff --git a/test/verify/check-system-journal b/test/verify/check-system-journal
index 74e0740edbf..56d00687b71 100755
--- a/test/verify/check-system-journal
+++ b/test/verify/check-system-journal
@@ -237,7 +237,10 @@ ExecStart=/bin/sh -c 'sleep 5; for s in $(seq 10); do echo SLOW; sleep 0.1; done
 
         b.click(".pf-v5-c-form__group:contains('Since') button")
         b.wait_text(".pf-v5-c-popover__title-text", "Start showing entries on or newer than the specified date.")
-        b.click(".pf-v5-c-popover__close button")
+        # FIXME: Closing the popover with the X button also closes the whole search form (just not with ph_mouse)
+        # b.click(".pf-v5-c-popover__close button")
+        # Thus close the popover the same way as we opened it, with the (i) icon
+        b.click(".pf-v5-c-form__group:contains('Since') button")
         b.wait_not_present(".pf-v5-c-popover")
         b.click("#journal-grep button[aria-label='Open advanced search']")
         b.wait_not_present("#journal-cmd-copy")
diff --git a/test/verify/check-system-services b/test/verify/check-system-services
index 252d477d9c7..e6af3ab6a57 100755
--- a/test/verify/check-system-services
+++ b/test/verify/check-system-services
@@ -23,7 +23,6 @@ import testlib
 from machine import testvm
 
 
-@testlib.nondestructive
 class TestServices(testlib.MachineCase):
 
     def setUp(self):
@@ -56,6 +55,9 @@ class TestServices(testlib.MachineCase):
 
     def toggle_onoff(self):
         self.browser.click(".service-top-panel .pf-v5-c-switch__input")
+        # move away from the button again to remove the tooltip; it covers the kebab
+        self.browser.mouse(".service-top-panel .pf-v5-c-switch__input", "mouseleave")
+        self.browser.wait_not_present("[role='tooltip']")
 
     def do_action(self, action):
         self.browser.click(".service-top-panel button.pf-v5-c-menu-toggle")
@@ -365,6 +367,7 @@ WantedBy=default.target
         b.go(f'/system/services#/{suffix}')
         b.wait_not_present('#test.service > svg.service-thumbtack-icon-color')
 
+    @testlib.nondestructive
     def testFilter(self):
         b = self.browser
 
@@ -495,9 +498,11 @@ WantedBy=default.target
         b.click(".pf-v5-c-chip-group:contains('Active state') .pf-v5-c-chip-group__close > button")
         b.wait_not_present(".pf-v5-c-chip-group")
 
+    @testlib.nondestructive
     def testTimer(self):
         self._testTimer(user=False)
 
+    @testlib.nondestructive
     def testTimerSession(self):
         self._testTimer(user=True)
 
@@ -630,9 +635,11 @@ WantedBy=default.target
             b.wait_not_in_text(".service-top-panel .pf-v5-c-menu__list", "Delete")
             b.click(".pf-v5-c-breadcrumb a:contains('Services')")
 
+    @testlib.nondestructive
     def testServiceMetrics(self):
         self._testServiceMetrics(user=False)
 
+    @testlib.nondestructive
     def testServiceMetricsSession(self):
         self._testServiceMetrics(user=True)
 
@@ -680,9 +687,11 @@ ExecStart=/bin/awk -f /tmp/mem-hog{params}.awk
         # Check that listen is not shown for .service units
         b.wait_not_present("#listen")
 
+    @testlib.nondestructive
     def testOtherTypes(self):
         self._testOtherTypes(user=False)
 
+    @testlib.nondestructive
     def testOtherTypesSession(self):
         self._testOtherTypes(user=True)
 
@@ -785,6 +794,7 @@ ExecStart=/bin/awk -f /tmp/mem-hog{params}.awk
         b.enter_page("/system/services")
         b.wait_js_cond('window.location.hash === "' + append_user("#/test.service") + '"')
 
+    @testlib.nondestructive
     def testApi(self):
         b = self.browser
 
@@ -809,6 +819,7 @@ ExecStart=/bin/awk -f /tmp/mem-hog{params}.awk
         b.go('#/foo')
         b.wait_text('#exists', 'false')
 
+    @testlib.nondestructive
     def testConditions(self):
         m = self.machine
         b = self.browser
@@ -857,9 +868,11 @@ WantedBy=multi-user.target
         self.check_service_on(expect_reload=False)
         b.wait_not_present("#condition")
 
+    @testlib.nondestructive
     def testRelationships(self):
         self._testRelationships()
 
+    @testlib.nondestructive
     def testRelationshipsUser(self):
         self._testRelationships(user=True)
 
@@ -947,6 +960,7 @@ ExecStart=/bin/sh -c "while true; do sleep 5; done"
         b.click("#service-details-show-relationships button")
         b.wait_visible(rel_sel("After", "test-a.service"))
 
+    @testlib.nondestructive
     def testNotFound(self):
         m = self.machine
         b = self.browser
@@ -975,6 +989,7 @@ ExecStart=/bin/true
         b.click("#service-details-show-relationships button")
         b.wait_visible("#Requires a.pf-m-disabled:contains('not-found.service')")
 
+    @testlib.nondestructive
     def testResetFailed(self):
         m = self.machine
         b = self.browser
@@ -1055,6 +1070,7 @@ WantedBy=default.target
             b.click("#nav-system-item")
             b.set_layout("desktop")
 
+    @testlib.nondestructive
     def testNotifyFailed(self):
         m = self.machine
         b = self.browser
@@ -1126,6 +1142,7 @@ ExecStart=/usr/bin/false
             b.wait_not_in_text(".system-health-events", "service has failed")
             b.wait_not_in_text(".system-health-events", "services have failed")
 
+    @testlib.nondestructive
     def testHiddenFailure(self):
         m = self.machine
         b = self.browser
@@ -1159,6 +1176,7 @@ Where=/fail
 
         self.allow_journal_messages(".*type=1400 audit(.*): avc:  denied  { create } .* comm=\"systemd\" name=\"fail\".*")
 
+    @testlib.nondestructive
     def testTransientUnits(self):
         m = self.machine
         b = self.browser
@@ -1194,6 +1212,7 @@ Where=/fail
         b.switch_to_top()
         b.wait_js_cond('window.location.pathname == "/system/services"')
 
+    @testlib.nondestructive
     def testServicesThemeConsistency(self):
         b = self.browser
 
@@ -1208,6 +1227,7 @@ Where=/fail
         b.enter_page("/system/services")
         b.wait_not_present("html.pf-v5-theme-dark")
 
+    @testlib.nondestructive
     def testServicesFiltersURLConsistency(self):
         b = self.browser
 
@@ -1267,6 +1287,7 @@ Where=/fail
         self.assertNotIn("Not running", b.text(".services-list"))
         self.assertNotIn("Static", b.text(".services-list"))
 
+    @testlib.nondestructive
     def testAlias(self):
         m = self.machine
         b = self.browser
@@ -1323,6 +1344,7 @@ WantedBy=multi-user.target
         b.wait_in_text("#service-details-unit", "/etc/systemd/system/flower-rose.service")
         b.wait_in_text('.cockpit-log-panel .pf-v5-c-card__body', "Perfume")
 
+    @testlib.nondestructive
     def testUnprivileged(self):
         b = self.browser
         m = self.machine
diff --git a/test/verify/check-users b/test/verify/check-users
index 1c3ffeb8942..d51cd9b1a61 100755
--- a/test/verify/check-users
+++ b/test/verify/check-users
@@ -279,6 +279,7 @@ class TestAccounts(testlib.MachineCase):
         # disable password
         performUserAction(b, 'robert', 'Lock account')
         b.click("#account-confirm-lock-dialog footer .pf-m-danger.apply")
+        b.wait_not_present("#account-confirm-lock-dialog")
         # lock option is now disabled
         b.click("#accounts-list tbody tr:contains(robert) button.pf-v5-c-menu-toggle")
         b.wait_in_text(".pf-v5-c-menu__list-item:contains('Lock account').pf-m-disabled", 'Lock account')
diff --git a/tools/debian/copyright.template b/tools/debian/copyright.template
index 376e35babd3..06d68339ca3 100644
--- a/tools/debian/copyright.template
+++ b/tools/debian/copyright.template
@@ -50,7 +50,7 @@ Files: src/appstream/*.metainfo.xml.in src/client/*.metainfo.xml
 Copyright: Copyright (C) 2018 Red Hat, Inc.
 License: CC0-1.0
  On Debian systems, the complete text of the Creative Commons Zero v1.0
- Universal Public License is in "/usr/share/common-licenses/LGPL-2.1".
+ Universal Public License is in "/usr/share/common-licenses/CC0-1.0".
 
 #NPM# semi-autogenerated records for node_modules/ go here