From dbb8a4568ec21b563cf6face932add5af4144334 Mon Sep 17 00:00:00 2001 From: Your Name Date: Sat, 30 Dec 2017 16:34:44 -0400 Subject: tor flavours --- etc/tor-browser-ar.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-en-us.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-en.profile | 38 ++++++++++++++++++++++++++++++++++---- etc/tor-browser-es-es.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-es.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-fa.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-fr.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-it.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-ja.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-ko.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-pl.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-pt-br.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-ru.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-vi.profile | 36 ++++++++++++++++++++++++++++++++++++ etc/tor-browser-zh-cn.profile | 36 ++++++++++++++++++++++++++++++++++++ 15 files changed, 538 insertions(+), 4 deletions(-) create mode 100644 etc/tor-browser-ar.profile create mode 100644 etc/tor-browser-en-us.profile create mode 100644 etc/tor-browser-es-es.profile create mode 100644 etc/tor-browser-es.profile create mode 100644 etc/tor-browser-fa.profile create mode 100644 etc/tor-browser-fr.profile create mode 100644 etc/tor-browser-it.profile create mode 100644 etc/tor-browser-ja.profile create mode 100644 etc/tor-browser-ko.profile create mode 100644 etc/tor-browser-pl.profile create mode 100644 etc/tor-browser-pt-br.profile create mode 100644 etc/tor-browser-ru.profile create mode 100644 etc/tor-browser-vi.profile create mode 100644 etc/tor-browser-zh-cn.profile diff --git a/etc/tor-browser-ar.profile b/etc/tor-browser-ar.profile new file mode 100644 index 000000000..4f635166a --- /dev/null +++ b/etc/tor-browser-ar.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-ar from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-ar,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-ar +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-en-us.profile b/etc/tor-browser-en-us.profile new file mode 100644 index 000000000..762925655 --- /dev/null +++ b/etc/tor-browser-en-us.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-en-us from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-en-us,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-en-us +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-en.profile b/etc/tor-browser-en.profile index bf3a80139..b2bd2c5e9 100644 --- a/etc/tor-browser-en.profile +++ b/etc/tor-browser-en.profile @@ -1,6 +1,36 @@ -# Firejail profile alias for torbrowser-launcher -# This file is overwritten after every install/update +# Firejail profile for tor-browser-en from the Arch User Repository: -# Redirect -include /etc/firejail/torbrowser-launcher.profile +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-en,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-en +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-es-es.profile b/etc/tor-browser-es-es.profile new file mode 100644 index 000000000..f332b2cac --- /dev/null +++ b/etc/tor-browser-es-es.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-es-es from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-es-es,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-es-es +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-es.profile b/etc/tor-browser-es.profile new file mode 100644 index 000000000..89cc3b2fe --- /dev/null +++ b/etc/tor-browser-es.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-es from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-es,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-es +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-fa.profile b/etc/tor-browser-fa.profile new file mode 100644 index 000000000..7710d0f76 --- /dev/null +++ b/etc/tor-browser-fa.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-fa from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-fa,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-fa +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-fr.profile b/etc/tor-browser-fr.profile new file mode 100644 index 000000000..c0fbbb33b --- /dev/null +++ b/etc/tor-browser-fr.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-fr from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-fr,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-fr +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-it.profile b/etc/tor-browser-it.profile new file mode 100644 index 000000000..1095a6adb --- /dev/null +++ b/etc/tor-browser-it.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-it from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-it,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-it +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-ja.profile b/etc/tor-browser-ja.profile new file mode 100644 index 000000000..0f6dcf77f --- /dev/null +++ b/etc/tor-browser-ja.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-ja from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-ja,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-ja +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-ko.profile b/etc/tor-browser-ko.profile new file mode 100644 index 000000000..6e87bd24f --- /dev/null +++ b/etc/tor-browser-ko.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-ko from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-ko,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-ko +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-pl.profile b/etc/tor-browser-pl.profile new file mode 100644 index 000000000..06e0315bf --- /dev/null +++ b/etc/tor-browser-pl.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-pl from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-pl,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-pl +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-pt-br.profile b/etc/tor-browser-pt-br.profile new file mode 100644 index 000000000..dc1da8f61 --- /dev/null +++ b/etc/tor-browser-pt-br.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-pt-br from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-pt-br,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-pt-br +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-ru.profile b/etc/tor-browser-ru.profile new file mode 100644 index 000000000..616736da8 --- /dev/null +++ b/etc/tor-browser-ru.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-ru from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-ru,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-ru +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-vi.profile b/etc/tor-browser-vi.profile new file mode 100644 index 000000000..bf5292c2e --- /dev/null +++ b/etc/tor-browser-vi.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-vi from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-vi,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-vi +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all diff --git a/etc/tor-browser-zh-cn.profile b/etc/tor-browser-zh-cn.profile new file mode 100644 index 000000000..af04674f0 --- /dev/null +++ b/etc/tor-browser-zh-cn.profile @@ -0,0 +1,36 @@ +# Firejail profile for tor-browser-zh-cn from the Arch User Repository: + + +blacklist /usr/local/bin +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /var + +private-bin bash,grep,sed,tail,tor-browser-zh-cn,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +whitelist ${HOME}/.tor-browser-zh-cn +whitelist /dev/dri +whitelist /dev/full +whitelist /dev/null +whitelist /dev/ptmx +whitelist /dev/pts +whitelist /dev/random +whitelist /dev/shm +whitelist /dev/snd +whitelist /dev/tty +whitelist /dev/urandom +whitelist /dev/video0 +whitelist /dev/zero +whitelist ~/Downloads + +# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) +# https://github.com/netblue30/firejail/issues/955 +private-etc X11,pulse,machine-id + +private-tmp +noexec /tmp +shell none +seccomp +noroot +caps.drop all -- cgit v1.2.3-54-g00ecf From 2cd93846c5133608e9870c6b8c0955bf0a09ab81 Mon Sep 17 00:00:00 2001 From: Tad Date: Mon, 1 Jan 2018 05:38:43 -0500 Subject: Simplfy locale specific Tor Browser profiles --- etc/disable-programs.inc | 2 +- etc/tor-browser-ar.profile | 38 +++++--------------------------------- etc/tor-browser-en-us.profile | 38 +++++--------------------------------- etc/tor-browser-en.profile | 38 +++++--------------------------------- etc/tor-browser-es-es.profile | 40 ++++++---------------------------------- etc/tor-browser-es.profile | 38 +++++--------------------------------- etc/tor-browser-fa.profile | 38 +++++--------------------------------- etc/tor-browser-fr.profile | 38 +++++--------------------------------- etc/tor-browser-it.profile | 38 +++++--------------------------------- etc/tor-browser-ja.profile | 38 +++++--------------------------------- etc/tor-browser-ko.profile | 38 +++++--------------------------------- etc/tor-browser-pl.profile | 38 +++++--------------------------------- etc/tor-browser-pt-br.profile | 38 +++++--------------------------------- etc/tor-browser-ru.profile | 38 +++++--------------------------------- etc/tor-browser-vi.profile | 38 +++++--------------------------------- etc/tor-browser-zh-cn.profile | 38 +++++--------------------------------- etc/torbrowser-launcher.profile | 2 -- 17 files changed, 77 insertions(+), 499 deletions(-) diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 96de8050f..feb01e142 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -430,7 +430,7 @@ blacklist ${HOME}/.synfig blacklist ${HOME}/.tconn blacklist ${HOME}/.thunderbird blacklist ${HOME}/.tooling -blacklist ${HOME}/.tor-browser-en +blacklist ${HOME}/.tor-browser-* blacklist ${HOME}/.ts3client blacklist ${HOME}/.tuxguitar* blacklist ${HOME}/.unknown-horizons diff --git a/etc/tor-browser-ar.profile b/etc/tor-browser-ar.profile index 4f635166a..36eda5704 100644 --- a/etc/tor-browser-ar.profile +++ b/etc/tor-browser-ar.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-ar from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-ar,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-ar whitelist ${HOME}/.tor-browser-ar -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-en-us.profile b/etc/tor-browser-en-us.profile index 762925655..f3ca8a74d 100644 --- a/etc/tor-browser-en-us.profile +++ b/etc/tor-browser-en-us.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-en-us from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-en-us,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-en-us whitelist ${HOME}/.tor-browser-en-us -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-en.profile b/etc/tor-browser-en.profile index b2bd2c5e9..fb2c2f9c9 100644 --- a/etc/tor-browser-en.profile +++ b/etc/tor-browser-en.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-en from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-en,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-en whitelist ${HOME}/.tor-browser-en -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-es-es.profile b/etc/tor-browser-es-es.profile index f332b2cac..c6c0d6e92 100644 --- a/etc/tor-browser-es-es.profile +++ b/etc/tor-browser-es-es.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-es-es from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update +noblacklist ${HOME}/.tor-browser-en-es +whitelist ${HOME}/.tor-browser-en-es -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-es-es,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr -whitelist ${HOME}/.tor-browser-es-es -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id - -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-es.profile b/etc/tor-browser-es.profile index 89cc3b2fe..1fe940f72 100644 --- a/etc/tor-browser-es.profile +++ b/etc/tor-browser-es.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-es from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-es,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-es whitelist ${HOME}/.tor-browser-es -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-fa.profile b/etc/tor-browser-fa.profile index 7710d0f76..292c82de0 100644 --- a/etc/tor-browser-fa.profile +++ b/etc/tor-browser-fa.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-fa from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-fa,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-fa whitelist ${HOME}/.tor-browser-fa -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-fr.profile b/etc/tor-browser-fr.profile index c0fbbb33b..b7b5a3d26 100644 --- a/etc/tor-browser-fr.profile +++ b/etc/tor-browser-fr.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-fr from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-fr,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-fr whitelist ${HOME}/.tor-browser-fr -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-it.profile b/etc/tor-browser-it.profile index 1095a6adb..bcaff3305 100644 --- a/etc/tor-browser-it.profile +++ b/etc/tor-browser-it.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-it from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-it,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-it whitelist ${HOME}/.tor-browser-it -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-ja.profile b/etc/tor-browser-ja.profile index 0f6dcf77f..ffb98b874 100644 --- a/etc/tor-browser-ja.profile +++ b/etc/tor-browser-ja.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-ja from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-ja,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-ja whitelist ${HOME}/.tor-browser-ja -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-ko.profile b/etc/tor-browser-ko.profile index 6e87bd24f..c1a29f84e 100644 --- a/etc/tor-browser-ko.profile +++ b/etc/tor-browser-ko.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-ko from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-ko,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-ko whitelist ${HOME}/.tor-browser-ko -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-pl.profile b/etc/tor-browser-pl.profile index 06e0315bf..d2b8ea3bc 100644 --- a/etc/tor-browser-pl.profile +++ b/etc/tor-browser-pl.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-pl from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-pl,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-pl whitelist ${HOME}/.tor-browser-pl -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-pt-br.profile b/etc/tor-browser-pt-br.profile index dc1da8f61..0b97b5444 100644 --- a/etc/tor-browser-pt-br.profile +++ b/etc/tor-browser-pt-br.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-pt-br from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-pt-br,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-pl whitelist ${HOME}/.tor-browser-pt-br -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-ru.profile b/etc/tor-browser-ru.profile index 616736da8..21c6bc042 100644 --- a/etc/tor-browser-ru.profile +++ b/etc/tor-browser-ru.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-ru from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-ru,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-ru whitelist ${HOME}/.tor-browser-ru -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-vi.profile b/etc/tor-browser-vi.profile index bf5292c2e..b0284814c 100644 --- a/etc/tor-browser-vi.profile +++ b/etc/tor-browser-vi.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-vi from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-vi,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-vi whitelist ${HOME}/.tor-browser-vi -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/tor-browser-zh-cn.profile b/etc/tor-browser-zh-cn.profile index af04674f0..330574dd3 100644 --- a/etc/tor-browser-zh-cn.profile +++ b/etc/tor-browser-zh-cn.profile @@ -1,36 +1,8 @@ -# Firejail profile for tor-browser-zh-cn from the Arch User Repository: +# Firejail profile alias for torbrowser-launcher +# This file is overwritten after every install/update - -blacklist /usr/local/bin -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /var - -private-bin bash,grep,sed,tail,tor-browser-zh-cn,env,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf,file,expr +noblacklist ${HOME}/.tor-browser-zh-cn whitelist ${HOME}/.tor-browser-zh-cn -whitelist /dev/dri -whitelist /dev/full -whitelist /dev/null -whitelist /dev/ptmx -whitelist /dev/pts -whitelist /dev/random -whitelist /dev/shm -whitelist /dev/snd -whitelist /dev/tty -whitelist /dev/urandom -whitelist /dev/video0 -whitelist /dev/zero -whitelist ~/Downloads - -# FIXME: Spoof D-Bus machine id (tor-browser segfaults when it is missing!) -# https://github.com/netblue30/firejail/issues/955 -private-etc X11,pulse,machine-id -private-tmp -noexec /tmp -shell none -seccomp -noroot -caps.drop all +# Redirect +include /etc/firejail/torbrowser-launcher.profile diff --git a/etc/torbrowser-launcher.profile b/etc/torbrowser-launcher.profile index 81938ca57..51a5d7735 100644 --- a/etc/torbrowser-launcher.profile +++ b/etc/torbrowser-launcher.profile @@ -5,7 +5,6 @@ include /etc/firejail/torbrowser-launcher.local # Persistent global definitions include /etc/firejail/globals.local -noblacklist ${HOME}/.tor-browser-en noblacklist ${HOME}/.config/torbrowser noblacklist ${HOME}/.local/share/torbrowser @@ -14,7 +13,6 @@ include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc include /etc/firejail/disable-programs.inc -whitelist ${HOME}/.tor-browser-en whitelist ${HOME}/.config/torbrowser whitelist ${HOME}/.local/share/torbrowser include /etc/firejail/whitelist-common.inc -- cgit v1.2.3-54-g00ecf From e3b618011a880b5295ec00572958d16857bcaa60 Mon Sep 17 00:00:00 2001 From: Tad Date: Mon, 1 Jan 2018 06:01:53 -0500 Subject: TBB pt-br fixup --- etc/tor-browser-pt-br.profile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/tor-browser-pt-br.profile b/etc/tor-browser-pt-br.profile index 0b97b5444..55794401e 100644 --- a/etc/tor-browser-pt-br.profile +++ b/etc/tor-browser-pt-br.profile @@ -1,7 +1,7 @@ # Firejail profile alias for torbrowser-launcher # This file is overwritten after every install/update -noblacklist ${HOME}/.tor-browser-pl +noblacklist ${HOME}/.tor-browser-pt-br whitelist ${HOME}/.tor-browser-pt-br # Redirect -- cgit v1.2.3-54-g00ecf