1 files changed, 34 insertions, 4 deletions

diff --git a/etc/tor-browser-en.profile b/etc/tor-browser-en.profile
index bf3a80139..b2bd2c5e9 100644
--- a/etc/tor-browser-en.profile
+++ b/etc/tor-browser-en.profile
@@ -1,6 +1,36 @@
-# Firejail profile alias for torbrowser-launcher
-# This file is overwritten after every install/update
+# Firejail profile for tor-browser-en from the Arch User Repository:
 
 
-# Redirect
-include /etc/firejail/torbrowser-launcher.profile
+blacklist /usr/local/bin
+blacklist /boot
+blacklist /media
+blacklist /mnt
+blacklist /opt
+blacklist /var
+
+private-bin bash,grep,sed,tail,tor-browser-en,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr
+whitelist ${HOME}/.tor-browser-en
+whitelist /dev/dri
+whitelist /dev/full
+whitelist /dev/null
+whitelist /dev/ptmx
+whitelist /dev/pts
+whitelist /dev/random
+whitelist /dev/shm
+whitelist /dev/snd
+whitelist /dev/tty
+whitelist /dev/urandom
+whitelist /dev/video0
+whitelist /dev/zero
+whitelist ~/Downloads
+
+# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!)
+# https://github.com/netblue30/firejail/issues/955
+private-etc X11,pulse,machine-id
+
+private-tmp
+noexec /tmp
+shell none
+seccomp
+noroot
+caps.drop all