]> git.lizzy.rs Git - torbrowser-launcher.git/commit
Disable the user-download abstraction and corresponding addition, by default.
authorintrigeri <intrigeri@boum.org>
Thu, 14 Aug 2014 18:03:34 +0000 (18:03 +0000)
committerintrigeri <intrigeri@boum.org>
Thu, 14 Aug 2014 18:07:26 +0000 (18:07 +0000)
commitea3f680359110f0c091a7719630f676cab06b2fb
tree8848600ea28b5a39c947ef0f907a1f325a3bec76
parentc107a43f42b5b156de2655a632a34c70abfbaf92
Disable the user-download abstraction and corresponding addition, by default.

This partially reverts changes introduced in commit 04b24660, without any
explanation. Those changes actually allow TBB to read e.g.
`@{HOME}/[a-zA-Z0-9]*`, that is most of users' personal files, which defeats in
great part the purpose of this profile. Likewise for read access to `@{HOME}/`,
which quite often contain folders whose name users might not want to leak.

Still, some people might want to use this, so let's leave these rules in here,
but commented out, explaining what the consequences of enabling them are.
apparmor/torbrowser.Browser.firefox