tor-browser for Tor Browser profile #5245

New issue

Closed

opened 2026-05-05 10:34:54 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 10:34:54 -06:00

Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/4759
Author: @fenuks
Created: 12/9/2021
Status: ✅ Merged
Merged: 12/19/2021
Merged by: @netblue30

Base: master ← Head: tor-browser-update-fix

📝 Commits (1)

a3ca329 Allow /opt/tor-browser for Tor Browser profile

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 etc/profile-m-z/torbrowser-launcher.profile (+1 -1)

📄 Description

This fixes updating local Tor Browser installation in ~/.local/opt/tor-browser on Arch Linux. When package is updated, Tor Browser launcher extracts archive from /opt/tor-browser into user's local directory.

It seems that

noblacklist /opt/tor-browser
blacklist /opt

doesn't work, all directories within /opt are blacklisted, and second rule has to be rewritten as blacklist /opt/*, but as side effect, in sandbox you can see all the names of directories in /opt, but cannot cd into them. I think it would be useful and intuitive if firejail would allow to write rules as I originally tried.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/4759 **Author:** [@fenuks](https://github.com/fenuks) **Created:** 12/9/2021 **Status:** ✅ Merged **Merged:** 12/19/2021 **Merged by:** [@netblue30](https://github.com/netblue30) **Base:** `master` ← **Head:** `tor-browser-update-fix` --- ### 📝 Commits (1) - [`a3ca329`](https://github.com/netblue30/firejail/commit/a3ca329377b20ef1fa9967b6d8b981fe7f37df02) Allow /opt/tor-browser for Tor Browser profile ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `etc/profile-m-z/torbrowser-launcher.profile` (+1 -1) </details> ### 📄 Description This fixes updating local Tor Browser installation in ~/.local/opt/tor-browser on Arch Linux. When package is updated, Tor Browser launcher extracts archive from /opt/tor-browser into user's local directory. It seems that ``` noblacklist /opt/tor-browser blacklist /opt ``` doesn't work, all directories within /opt are blacklisted, and second rule has to be rewritten as `blacklist /opt/*`, but as side effect, in sandbox you can see all the names of directories in /opt, but cannot `cd` into them. I think it would be useful and intuitive if firejail would allow to write rules as I originally tried. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>