root
8d303d2bbe
Packages with configuration changes: +tor 0.4.5.10-1~deb11u1 amd64 +torbrowser-launcher 0.3.5-2 amd64 +torsocks 2.3.0-3 amd64 Package changes: +libdouble-conversion3 3.1.5-6.1 amd64 +libmd4c0 0.4.7-2 amd64 +libpcre2-16-0 10.36-2 amd64 +libqt5core5a 5.15.2+dfsg-9 amd64 +libqt5dbus5 5.15.2+dfsg-9 amd64 +libqt5designer5 5.15.2-5 amd64 +libqt5gui5 5.15.2+dfsg-9 amd64 +libqt5help5 5.15.2-5 amd64 +libqt5network5 5.15.2+dfsg-9 amd64 +libqt5printsupport5 5.15.2+dfsg-9 amd64 +libqt5sql5 5.15.2+dfsg-9 amd64 +libqt5sql5-sqlite 5.15.2+dfsg-9 amd64 +libqt5svg5 5.15.2-3 amd64 +libqt5test5 5.15.2+dfsg-9 amd64 +libqt5widgets5 5.15.2+dfsg-9 amd64 +libqt5xml5 5.15.2+dfsg-9 amd64 +libxcb-icccm4 0.4.1-1.1 amd64 +libxcb-image0 0.4.0-1+b3 amd64 +libxcb-keysyms1 0.4.0-1+b2 amd64 +libxcb-render-util0 0.3.9-1+b1 amd64 +libxcb-xinerama0 1.14-3 amd64 +libxcb-xinput0 1.14-3 amd64 +libxcb-xkb1 1.14-3 amd64 +libxkbcommon-x11-0 1.0.3-2 amd64 +python3-packaging 20.9-2 all +python3-pyparsing 2.4.7-1 all +python3-pyqt5 5.15.2+dfsg-3 amd64 +python3-pyqt5.sip 12.8.1-1+b2 amd64 +python3-socks 1.7.1+dfsg-1 all +qt5-gtk-platformtheme 5.15.2+dfsg-9 amd64 +qttranslations5-l10n 5.15.2-2 all +tor 0.4.5.10-1~deb11u1 amd64 +tor-geoipdb 0.4.5.10-1~deb11u1 all +torbrowser-launcher 0.3.5-2 amd64 +torsocks 2.3.0-3 amd64
48 lines
1.6 KiB
Plaintext
48 lines
1.6 KiB
Plaintext
#include <tunables/global>
|
|
#include <tunables/torbrowser>
|
|
|
|
@{torbrowser_tor_executable} = /home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/TorBrowser/Tor/tor
|
|
|
|
profile torbrowser_tor @{torbrowser_tor_executable} {
|
|
#include <abstractions/base>
|
|
|
|
network netlink raw,
|
|
network tcp,
|
|
network udp,
|
|
|
|
/etc/host.conf r,
|
|
/etc/nsswitch.conf r,
|
|
/etc/passwd r,
|
|
/etc/resolv.conf r,
|
|
owner @{torbrowser_home_dir}/TorBrowser/Tor/tor mr,
|
|
owner @{torbrowser_home_dir}/TorBrowser/Data/Tor/ rw,
|
|
owner @{torbrowser_home_dir}/TorBrowser/Data/Tor/** rw,
|
|
owner @{torbrowser_home_dir}/TorBrowser/Data/Tor/lock rwk,
|
|
owner @{torbrowser_home_dir}/TorBrowser/Tor/*.so mr,
|
|
owner @{torbrowser_home_dir}/TorBrowser/Tor/*.so.* mr,
|
|
|
|
# Support some of the included pluggable transports
|
|
owner @{torbrowser_home_dir}/TorBrowser/Tor/PluggableTransports/** rix,
|
|
@{PROC}/sys/net/core/somaxconn r,
|
|
#include <abstractions/ssl_certs>
|
|
|
|
# Silence file_inherit logs
|
|
deny @{torbrowser_home_dir}/{browser/,}omni.ja r,
|
|
deny @{torbrowser_home_dir}/{browser/,}features/*.xpi r,
|
|
deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/.parentlock rw,
|
|
deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/extensions/*.xpi r,
|
|
deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/startupCache/* r,
|
|
# Silence logs from included pluggable transports
|
|
deny /etc/hosts r,
|
|
deny /etc/services r,
|
|
|
|
@{PROC}/sys/kernel/random/uuid r,
|
|
/sys/devices/system/cpu/ r,
|
|
/sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,
|
|
|
|
# OnionShare compatibility
|
|
/tmp/onionshare/** rw,
|
|
|
|
#include <local/torbrowser.Tor.tor>
|
|
}
|