summaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar Tad <tad@spotco.us>2018-01-01 05:38:43 -0500
committerLibravatar Tad <tad@spotco.us>2018-01-01 05:38:43 -0500
commit2cd93846c5133608e9870c6b8c0955bf0a09ab81 (patch)
treebb12bdc5453188a4eeb4aa5e7f62017d74daef4e /etc
parenttor flavours (diff)
downloadfirejail-2cd93846c5133608e9870c6b8c0955bf0a09ab81.tar.gz
firejail-2cd93846c5133608e9870c6b8c0955bf0a09ab81.tar.zst
firejail-2cd93846c5133608e9870c6b8c0955bf0a09ab81.zip
Simplfy locale specific Tor Browser profiles
Diffstat (limited to 'etc')
-rw-r--r--etc/disable-programs.inc2
-rw-r--r--etc/tor-browser-ar.profile38
-rw-r--r--etc/tor-browser-en-us.profile38
-rw-r--r--etc/tor-browser-en.profile38
-rw-r--r--etc/tor-browser-es-es.profile40
-rw-r--r--etc/tor-browser-es.profile38
-rw-r--r--etc/tor-browser-fa.profile38
-rw-r--r--etc/tor-browser-fr.profile38
-rw-r--r--etc/tor-browser-it.profile38
-rw-r--r--etc/tor-browser-ja.profile38
-rw-r--r--etc/tor-browser-ko.profile38
-rw-r--r--etc/tor-browser-pl.profile38
-rw-r--r--etc/tor-browser-pt-br.profile38
-rw-r--r--etc/tor-browser-ru.profile38
-rw-r--r--etc/tor-browser-vi.profile38
-rw-r--r--etc/tor-browser-zh-cn.profile38
-rw-r--r--etc/torbrowser-launcher.profile2
17 files changed, 77 insertions, 499 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 96de8050f..feb01e142 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -430,7 +430,7 @@ blacklist ${HOME}/.synfig
430blacklist ${HOME}/.tconn 430blacklist ${HOME}/.tconn
431blacklist ${HOME}/.thunderbird 431blacklist ${HOME}/.thunderbird
432blacklist ${HOME}/.tooling 432blacklist ${HOME}/.tooling
433blacklist ${HOME}/.tor-browser-en 433blacklist ${HOME}/.tor-browser-*
434blacklist ${HOME}/.ts3client 434blacklist ${HOME}/.ts3client
435blacklist ${HOME}/.tuxguitar* 435blacklist ${HOME}/.tuxguitar*
436blacklist ${HOME}/.unknown-horizons 436blacklist ${HOME}/.unknown-horizons
diff --git a/etc/tor-browser-ar.profile b/etc/tor-browser-ar.profile
index 4f635166a..36eda5704 100644
--- a/etc/tor-browser-ar.profile
+++ b/etc/tor-browser-ar.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-ar from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-ar
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-ar,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-ar 5whitelist ${HOME}/.tor-browser-ar
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-en-us.profile b/etc/tor-browser-en-us.profile
index 762925655..f3ca8a74d 100644
--- a/etc/tor-browser-en-us.profile
+++ b/etc/tor-browser-en-us.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-en-us from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-en-us
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-en-us,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-en-us 5whitelist ${HOME}/.tor-browser-en-us
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-en.profile b/etc/tor-browser-en.profile
index b2bd2c5e9..fb2c2f9c9 100644
--- a/etc/tor-browser-en.profile
+++ b/etc/tor-browser-en.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-en from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-en
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-en,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-en 5whitelist ${HOME}/.tor-browser-en
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-es-es.profile b/etc/tor-browser-es-es.profile
index f332b2cac..c6c0d6e92 100644
--- a/etc/tor-browser-es-es.profile
+++ b/etc/tor-browser-es-es.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-es-es from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
4noblacklist ${HOME}/.tor-browser-en-es
5whitelist ${HOME}/.tor-browser-en-es
3 6
4blacklist /usr/local/bin 7# Redirect
5blacklist /boot 8include /etc/firejail/torbrowser-launcher.profile
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-es-es,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-es-es
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30
31private-tmp
32noexec /tmp
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-es.profile b/etc/tor-browser-es.profile
index 89cc3b2fe..1fe940f72 100644
--- a/etc/tor-browser-es.profile
+++ b/etc/tor-browser-es.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-es from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-es
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-es,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-es 5whitelist ${HOME}/.tor-browser-es
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-fa.profile b/etc/tor-browser-fa.profile
index 7710d0f76..292c82de0 100644
--- a/etc/tor-browser-fa.profile
+++ b/etc/tor-browser-fa.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-fa from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-fa
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-fa,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-fa 5whitelist ${HOME}/.tor-browser-fa
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-fr.profile b/etc/tor-browser-fr.profile
index c0fbbb33b..b7b5a3d26 100644
--- a/etc/tor-browser-fr.profile
+++ b/etc/tor-browser-fr.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-fr from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-fr
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-fr,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-fr 5whitelist ${HOME}/.tor-browser-fr
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-it.profile b/etc/tor-browser-it.profile
index 1095a6adb..bcaff3305 100644
--- a/etc/tor-browser-it.profile
+++ b/etc/tor-browser-it.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-it from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-it
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-it,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-it 5whitelist ${HOME}/.tor-browser-it
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-ja.profile b/etc/tor-browser-ja.profile
index 0f6dcf77f..ffb98b874 100644
--- a/etc/tor-browser-ja.profile
+++ b/etc/tor-browser-ja.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-ja from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-ja
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-ja,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-ja 5whitelist ${HOME}/.tor-browser-ja
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-ko.profile b/etc/tor-browser-ko.profile
index 6e87bd24f..c1a29f84e 100644
--- a/etc/tor-browser-ko.profile
+++ b/etc/tor-browser-ko.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-ko from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-ko
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-ko,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-ko 5whitelist ${HOME}/.tor-browser-ko
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-pl.profile b/etc/tor-browser-pl.profile
index 06e0315bf..d2b8ea3bc 100644
--- a/etc/tor-browser-pl.profile
+++ b/etc/tor-browser-pl.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-pl from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-pl
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-pl,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-pl 5whitelist ${HOME}/.tor-browser-pl
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-pt-br.profile b/etc/tor-browser-pt-br.profile
index dc1da8f61..0b97b5444 100644
--- a/etc/tor-browser-pt-br.profile
+++ b/etc/tor-browser-pt-br.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-pt-br from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-pl
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-pt-br,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-pt-br 5whitelist ${HOME}/.tor-browser-pt-br
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-ru.profile b/etc/tor-browser-ru.profile
index 616736da8..21c6bc042 100644
--- a/etc/tor-browser-ru.profile
+++ b/etc/tor-browser-ru.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-ru from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-ru
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-ru,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-ru 5whitelist ${HOME}/.tor-browser-ru
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-vi.profile b/etc/tor-browser-vi.profile
index bf5292c2e..b0284814c 100644
--- a/etc/tor-browser-vi.profile
+++ b/etc/tor-browser-vi.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-vi from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-vi
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-vi,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-vi 5whitelist ${HOME}/.tor-browser-vi
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/tor-browser-zh-cn.profile b/etc/tor-browser-zh-cn.profile
index af04674f0..330574dd3 100644
--- a/etc/tor-browser-zh-cn.profile
+++ b/etc/tor-browser-zh-cn.profile
@@ -1,36 +1,8 @@
1# Firejail profile for tor-browser-zh-cn from the Arch User Repository: 1# Firejail profile alias for torbrowser-launcher
2# This file is overwritten after every install/update
2 3
3 4noblacklist ${HOME}/.tor-browser-zh-cn
4blacklist /usr/local/bin
5blacklist /boot
6blacklist /media
7blacklist /mnt
8blacklist /opt
9blacklist /var
10
11private-bin bash,grep,sed,tail,tor-browser-zh-cn,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
12whitelist ${HOME}/.tor-browser-zh-cn 5whitelist ${HOME}/.tor-browser-zh-cn
13whitelist /dev/dri
14whitelist /dev/full
15whitelist /dev/null
16whitelist /dev/ptmx
17whitelist /dev/pts
18whitelist /dev/random
19whitelist /dev/shm
20whitelist /dev/snd
21whitelist /dev/tty
22whitelist /dev/urandom
23whitelist /dev/video0
24whitelist /dev/zero
25whitelist ~/Downloads
26
27# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
28# https://github.com/netblue30/firejail/issues/955
29private-etc X11,pulse,machine-id
30 6
31private-tmp 7# Redirect
32noexec /tmp 8include /etc/firejail/torbrowser-launcher.profile
33shell none
34seccomp
35noroot
36caps.drop all
diff --git a/etc/torbrowser-launcher.profile b/etc/torbrowser-launcher.profile
index 81938ca57..51a5d7735 100644
--- a/etc/torbrowser-launcher.profile
+++ b/etc/torbrowser-launcher.profile
@@ -5,7 +5,6 @@ include /etc/firejail/torbrowser-launcher.local
5# Persistent global definitions 5# Persistent global definitions
6include /etc/firejail/globals.local 6include /etc/firejail/globals.local
7 7
8noblacklist ${HOME}/.tor-browser-en
9noblacklist ${HOME}/.config/torbrowser 8noblacklist ${HOME}/.config/torbrowser
10noblacklist ${HOME}/.local/share/torbrowser 9noblacklist ${HOME}/.local/share/torbrowser
11 10
@@ -14,7 +13,6 @@ include /etc/firejail/disable-devel.inc
14include /etc/firejail/disable-passwdmgr.inc 13include /etc/firejail/disable-passwdmgr.inc
15include /etc/firejail/disable-programs.inc 14include /etc/firejail/disable-programs.inc
16 15
17whitelist ${HOME}/.tor-browser-en
18whitelist ${HOME}/.config/torbrowser 16whitelist ${HOME}/.config/torbrowser
19whitelist ${HOME}/.local/share/torbrowser 17whitelist ${HOME}/.local/share/torbrowser
20include /etc/firejail/whitelist-common.inc 18include /etc/firejail/whitelist-common.inc
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-02 15:11:12 +0000