aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/torbrowser-launcher.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
commit018d75775eab4a0f045949a9d069c57686ca2686 (patch)
treeaac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/profile-m-z/torbrowser-launcher.profile
parentsmall fixes (diff)
downloadfirejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz
firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst
firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip
reorganize github etc directory
Diffstat (limited to 'etc/profile-m-z/torbrowser-launcher.profile')
-rw-r--r--etc/profile-m-z/torbrowser-launcher.profile56
1 files changed, 56 insertions, 0 deletions
diff --git a/etc/profile-m-z/torbrowser-launcher.profile b/etc/profile-m-z/torbrowser-launcher.profile
new file mode 100644
index 000000000..6bcc51f4d
--- /dev/null
+++ b/etc/profile-m-z/torbrowser-launcher.profile
@@ -0,0 +1,56 @@
1# Firejail profile for torbrowser-launcher
2# Description: Helps download and run the Tor Browser Bundle
3# This file is overwritten after every install/update
4# Persistent local customizations
5include torbrowser-launcher.local
6# Persistent global definitions
7include globals.local
8
9ignore noexec ${HOME}
10
11noblacklist ${HOME}/.config/torbrowser
12noblacklist ${HOME}/.local/share/torbrowser
13
14# Allow python (blacklisted by disable-interpreters.inc)
15include allow-python2.inc
16include allow-python3.inc
17
18include disable-common.inc
19include disable-devel.inc
20include disable-exec.inc
21include disable-interpreters.inc
22include disable-passwdmgr.inc
23include disable-programs.inc
24include disable-xdg.inc
25
26mkdir ${HOME}/.config/torbrowser
27mkdir ${HOME}/.local/share/torbrowser
28whitelist ${DOWNLOADS}
29whitelist ${HOME}/.config/torbrowser
30whitelist ${HOME}/.local/share/torbrowser
31include whitelist-common.inc
32include whitelist-var-common.inc
33
34caps.drop all
35netfilter
36nodvd
37nogroups
38nonewprivs
39noroot
40notv
41nou2f
42novideo
43protocol unix,inet,inet6
44seccomp !chroot
45shell none
46# tracelog may cause issues, see github issue #1930
47#tracelog
48
49disable-mnt
50private-bin bash,cat,cp,cut,dirname,env,expr,file,gpg,grep,gxmessage,id,kdialog,ln,mkdir,mv,python*,rm,sed,sh,tail,tar,tclsh,test,tor-browser,tor-browser-en,torbrowser-launcher,update-desktop-database,xmessage,xz,zenity
51private-dev
52private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,pki,pulse,resolv.conf,ssl
53private-tmp
54
55dbus-user none
56dbus-system none