aboutsummaryrefslogtreecommitdiffstats
path: root/etc/tor.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/tor.profile')
-rw-r--r--etc/tor.profile10
1 files changed, 5 insertions, 5 deletions
diff --git a/etc/tor.profile b/etc/tor.profile
index 2e2172cad..73577825a 100644
--- a/etc/tor.profile
+++ b/etc/tor.profile
@@ -8,6 +8,7 @@ include /etc/firejail/globals.local
8# How to use: 8# How to use:
9# Create a script called anything (e.g. mytor) 9# Create a script called anything (e.g. mytor)
10# with the following contents: 10# with the following contents:
11
11# #!/bin/bash 12# #!/bin/bash
12# TORCMD="tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 1" 13# TORCMD="tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 1"
13# sudo -b daemon -f -d -- firejail --profile=/home/<username>/.config/firejail/tor.profile $TORCMD 14# sudo -b daemon -f -d -- firejail --profile=/home/<username>/.config/firejail/tor.profile $TORCMD
@@ -15,10 +16,10 @@ include /etc/firejail/globals.local
15# You'll also likely want to disable the system service (if it exists) 16# You'll also likely want to disable the system service (if it exists)
16# Run mytor (or whatever you called the script above) whenever you want to start tor 17# Run mytor (or whatever you called the script above) whenever you want to start tor
17 18
18blacklist /boot 19include /etc/firejail/disable-common.inc
19blacklist /media 20include /etc/firejail/disable-devel.inc
20blacklist /mnt 21include /etc/firejail/disable-passwdmgr.inc
21blacklist /opt 22include /etc/firejail/disable-programs.inc
22 23
23caps.keep setuid,setgid,net_bind_service,dac_read_search 24caps.keep setuid,setgid,net_bind_service,dac_read_search
24ipc-namespace 25ipc-namespace
@@ -29,7 +30,6 @@ nosound
29seccomp 30seccomp
30shell none 31shell none
31writable-var 32writable-var
32x11 none
33 33
34private 34private
35private-bin tor,bash 35private-bin tor,bash