Skip to content

Commit

Permalink
fix tor browser
Browse files Browse the repository at this point in the history
  • Loading branch information
netblue30 committed Feb 14, 2021
1 parent 6bc9251 commit 39bc161
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 36 deletions.
5 changes: 4 additions & 1 deletion etc/profile-m-z/start-tor-browser.desktop.profile
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
include start-tor-browser.desktop.local
# Persistent global definitions
# added by included profile
#include globals.local
include globals.local

This comment has been minimized.

Copy link
@glitsj16

glitsj16 Feb 15, 2021

Collaborator

IMO we should keep it commented, as the final profile in the include chain - torbrowser-launcher.profile - already includes globals.local. Or is there some kind of potential race condition that needs to be avoided by changing this 'logic' here?


noblacklist ${HOME}/.tor-browser*

Expand Down Expand Up @@ -72,5 +72,8 @@ whitelist ${HOME}/.tor-browser_vi
whitelist ${HOME}/.tor-browser_zh-CN
whitelist ${HOME}/.tor-browser_zh-TW

# Ignoring apparmor, tor browser is installed in user home directory using the binary archive distributed by Tor Foundation
ignore apparmor

# Redirect
include torbrowser-launcher.profile
37 changes: 2 additions & 35 deletions etc/profile-m-z/start-tor-browser.profile
Original file line number Diff line number Diff line change
Expand Up @@ -5,38 +5,5 @@ include start-tor-browser.local
# Persistent global definitions
include globals.local

This comment has been minimized.

Copy link
@glitsj16

glitsj16 Feb 15, 2021

Collaborator

Similar remark as above. Now that this is a redirect I think we should apply the same 'logic' as we do elsewhere to avoid doubled includes. Or is there some kind of potential race condition that needs to be avoided here?


ignore noexec ${HOME}

include disable-common.inc
include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-passwdmgr.inc
include disable-programs.inc
include disable-xdg.inc

include whitelist-var-common.inc

caps.drop all
netfilter
nodvd
nogroups
nonewprivs
noroot
notv
nou2f
novideo
protocol unix,inet,inet6
seccomp !chroot
shell none
# tracelog may cause issues, see github issue #1930
#tracelog

disable-mnt
private-bin bash,cat,cp,cut,dirname,env,getconf,gpg,grep,gxmessage,id,kdialog,ln,mkdir,pwd,readlink,realpath,rm,sed,sh,tail,test,update-desktop-database,xmessage,zenity
private-dev
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,pki,pulse,resolv.conf,ssl
private-tmp

dbus-user none
dbus-system none
# Redirect
include start-tor-browser.desktop.profile

0 comments on commit 39bc161

Please sign in to comment.