search

roddhjav / apparmor.d

Full set of AppArmor profiles (~ 1500 profiles)
https://apparmor.pujol.io
GNU General Public License v2.0
430 stars 39 forks source link

torbrowser-launcher profile complaints #491

Open odomingao opened 3 days ago

odomingao commented 3 days ago

It fails to launch in enforce mode. Complaints:

DENIED  torbrowser-launcher file_inherit owner /dev/tty1 comm=torbrowser-laun requested_mask=wr denied_mask=wr
DENIED  torbrowser-launcher exec @{bin}/gpgconf -> torbrowser-launcher//gpg info="no new privs" comm=torbrowser-laun requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher exec @{bin}/gpgconf -> torbrowser-launcher//gpg info="no new privs" comm=torbrowser-laun requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher mkdir owner @{run}/user/@{uid}/gnupg/ comm=gpgconf requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher exec @{bin}/gpg -> torbrowser-launcher//gpg info="no new privs" comm=torbrowser-laun requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher exec @{bin}/gpgsm -> torbrowser-launcher//gpg info="no new privs" comm=torbrowser-laun requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher open owner /dev/pts/ comm=torbrowser-laun requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner /dev/ comm=torbrowser-laun requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher link owner @{user_share_dirs}/torbrowser/gnupg_homedir/.#lk0x@{hex16}.host.19x -> @{user_share_dirs}/torbrowser/gnupg_homedir/.#lk0x@{hex16}.host.19 comm=gpg requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher link owner @{user_share_dirs}/torbrowser/gnupg_homedir/pubring.kbx.lock -> @{user_share_dirs}/torbrowser/gnupg_homedir/.#lk0x@{hex16}.host.19 comm=gpg requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher mkdir owner /var/cache/ comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher chmod owner /var/cache/ comm=torbrowser-laun requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher mkdir owner /var/cache/fontconfig/ comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher chmod owner /var/cache/fontconfig/ comm=torbrowser-laun requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/CACHEDIR.TAG.TMP-Gfk9Tc comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/CACHEDIR.TAG.TMP-Gfk9Tc comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/CACHEDIR.TAG.LCK -> /var/cache/fontconfig/CACHEDIR.TAG.TMP-Gfk9Tc comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/CACHEDIR.TAG.TMP-Gfk9Tc comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/CACHEDIR.TAG.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/CACHEDIR.TAG.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/CACHEDIR.TAG.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/CACHEDIR.TAG comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/CACHEDIR.TAG.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-jxlmj3 comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-jxlmj3 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-jxlmj3 comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-jxlmj3 comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-8Dj0L5 comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-8Dj0L5 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-8Dj0L5 comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-8Dj0L5 comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-eML6Ts comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-eML6Ts comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-eML6Ts comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-eML6Ts comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-eSvP1K comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-eSvP1K comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-eSvP1K comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-eSvP1K comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-Us6y74 comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-Us6y74 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-Us6y74 comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-Us6y74 comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-UcdWx6 comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-UcdWx6 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-UcdWx6 comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-UcdWx6 comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-TqwN6L comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-TqwN6L comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-TqwN6L comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-TqwN6L comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-pIbRxX comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-pIbRxX comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-pIbRxX comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-pIbRxX comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-WW9gu0 comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-WW9gu0 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-WW9gu0 comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-WW9gu0 comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-4Vdy2f comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-4Vdy2f comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-4Vdy2f comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-4Vdy2f comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-2jR2DW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-2jR2DW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-2jR2DW comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-2jR2DW comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-2WhhWO comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-2WhhWO comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-2WhhWO comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-2WhhWO comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-Bv8rik comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-Bv8rik comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher link owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-Bv8rik comm=torbrowser-laun requested_mask=l denied_mask=l
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-Bv8rik comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher mknod owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher rename_src owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW comm=torbrowser-laun requested_mask=wd denied_mask=wd
ALLOWED torbrowser-launcher rename_dest owner /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=torbrowser-laun requested_mask=wc denied_mask=wc
ALLOWED torbrowser-launcher unlink owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK comm=torbrowser-laun requested_mask=d denied_mask=d
ALLOWED torbrowser-launcher open owner /dev/pts/ comm=bash requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner /dev/ comm=bash requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner /dev/console comm=bash requested_mask=wr denied_mask=wr
ALLOWED torbrowser-launcher exec owner ./Browser/start-tor-browser -> torbrowser-start info="no new privs" comm=bash requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher exec @{bin}/id -> torbrowser-launcher//null-@{bin}/id comm=bash requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec @{bin}/id -> torbrowser-launcher//null-@{bin}/id info="no new privs" comm=bash requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher exec @{bin}/dirname -> torbrowser-launcher//null-@{bin}/dirname comm=bash requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec @{bin}/dirname -> torbrowser-launcher//null-@{bin}/dirname info="no new privs" comm=bash requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher exec @{bin}/cp -> torbrowser-launcher//null-@{bin}/cp comm=bash requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec @{bin}/cp -> torbrowser-launcher//null-@{bin}/cp info="no new privs" comm=bash requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher exec @{bin}/getconf -> torbrowser-launcher//null-@{bin}/getconf comm=bash requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec @{bin}/getconf -> torbrowser-launcher//null-@{bin}/getconf info="no new privs" comm=bash requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher exec @{bin}/expr -> torbrowser-launcher//null-@{bin}/expr comm=bash requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec @{bin}/expr -> torbrowser-launcher//null-@{bin}/expr info="no new privs" comm=bash requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher exec @{bin}/rm -> torbrowser-launcher//null-@{bin}/rm comm=bash requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec @{bin}/rm -> torbrowser-launcher//null-@{bin}/rm info="no new privs" comm=bash requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher exec owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox comm=bash requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec owner ./firefox -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox info="no new privs" comm=bash requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher exec @{bin}/dirname -> torbrowser-launcher//null-@{bin}/dirname comm=firefox requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec @{bin}/dirname -> torbrowser-launcher//null-@{bin}/dirname info="no new privs" comm=firefox requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher exec owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/abicheck -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/abicheck comm=firefox requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec owner ./abicheck -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/abicheck info="no new privs" comm=firefox requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher exec owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox.real -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox.real comm=firefox requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox.real -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox.real info="no new privs" comm=firefox requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/task/@{tid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libnspr4.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libplc4.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libplds4.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libmozsandbox.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher capable comm=firefox.real capability=21 capname=sys_admin
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/liblgpllibs.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libnssutil3.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libnss3.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libsmime3.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libmozsqlite3.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libssl3.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libmozgtk.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libmozwayland.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libxul.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/.parentlock comm=firefox.real requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher exec owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/glxtest -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/glxtest comm=firefox.real requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/glxtest -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/glxtest info="no new privs" comm=firefox.real requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part0/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part0/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part1/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part1/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part2/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part2/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part3/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part3/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part4/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part4/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part5/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part5/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part6/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part6/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part7/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part7/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part8/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part8/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part9/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part9/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part10/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part10/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part11/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part11/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part12/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part12/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part13/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part13/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part14/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part14/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part15/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part15/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part16/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part16/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part17/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part17/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part18/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part18/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part19/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part19/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part20/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part20/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part21/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part21/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part22/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part22/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part23/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part23/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part24/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part24/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part25/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part25/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part26/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part26/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part27/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part27/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part28/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part28/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part29/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part29/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part30/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part30/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part31/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part31/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part32/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part32/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part33/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part33/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part34/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part34/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part35/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part35/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part36/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part36/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part37/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part37/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part38/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part38/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part39/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part39/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part40/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part40/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part41/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part41/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part42/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part42/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part43/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part43/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part44/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part44/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part45/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part45/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part46/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part46/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part47/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part47/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part48/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part48/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part49/mesa_cache.db comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part49/mesa_cache.idx comm=glxtest requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/oom_score_adj comm=firefox.real requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher mknod owner "/tmp/Tor ProjectUpdateLock-68FBC79E80ABEBE" comm=firefox.real requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher open owner "/tmp/Tor ProjectUpdateLock-68FBC79E80ABEBE" comm=firefox.real requested_mask=rc denied_mask=rc
ALLOWED torbrowser-launcher file_lock owner "/tmp/Tor ProjectUpdateLock-68FBC79E80ABEBE" comm=firefox.real requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/cookies.sqlite comm=Cookie requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/mountinfo comm="Cache2 I/O" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/cookies.sqlite comm=firefox.real requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/mountinfo comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libsoftokn3.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libfreeblpriv3.so comm=firefox.real requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libnssckbi.so comm="StreamTrans #1" requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage.sqlite comm="QuotaManager IO" requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage/ls-archive.sqlite comm="QuotaManager IO" requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage/permanent/chrome/idb/@{int10}rsegmnoittet-es.sqlite comm="QuotaManager IO" requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/mountinfo comm="QuotaManager IO" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage/permanent/chrome/idb/@{int10}rsegmnoittet-es.sqlite comm="IndexedDB #1" requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/mountinfo comm="IndexedDB #1" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open /etc/mime.types comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open /etc/mailcap comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/cgroup comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher mkdir owner /tmp/Temp-@{uuid}/ comm=firefox.real requested_mask=c denied_mask=c
ALLOWED torbrowser-launcher capable comm="IPC Launch" capability=21 capname=sys_admin
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/uid_map comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/setgroups comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/gid_map comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="Sandbox Forked" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="Chroot Helper" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher exec owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox.real -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox.real comm="Sandbox Forked" requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox.real -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox.real info="no new privs" comm="Sandbox Forked" requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/task/@{tid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libsoftokn3.so comm="Socket Process" requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libfreeblpriv3.so comm="Socket Process" requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libipcclientcerts.so comm="Socket Process" requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher capable comm="Chroot Helper" capability=18 capname=sys_chroot
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="DOM Worker" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher exec owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Tor/tor -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Tor/tor comm="DOM Worker" requested_mask=x denied_mask=x
ALLOWED torbrowser-launcher exec owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Tor/tor -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Tor/tor info="no new privs" comm="DOM Worker" requested_mask=x denied_mask=x error=-1
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Tor/libevent-2.1.so.7 comm=tor requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Tor/libssl.so.3 comm=tor requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Tor/libcrypto.so.3 comm=tor requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/uid_map comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/setgroups comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/gid_map comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="Sandbox Forked" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="Chroot Helper" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/oom_score_adj comm=firefox.real requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/task/@{tid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open @{PROC}/sys/kernel/random/uuid comm=tor requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Tor/lock comm=tor requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/places.sqlite comm=firefox.real requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/favicons.sqlite comm=firefox.real requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/content-prefs.sqlite comm="mozStorage #2" requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/uid_map comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/setgroups comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/gid_map comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/oom_score_adj comm=firefox.real requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="Sandbox Forked" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="Chroot Helper" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/task/@{tid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libsoftokn3.so comm=WebExtensions requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libfreeblpriv3.so comm=WebExtensions requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage/default/moz-extension+++@{uuid}^userContextId comm="QuotaManager IO" requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage/default/moz-extension+++@{uuid}^userContextId comm="IndexedDB #2" requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/mountinfo comm="IndexedDB #2" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage-sync-v2.sqlite comm="BgIOThr~Pool #1" requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher file_lock owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage-sync-v2.sqlite-shm comm="BgIOThr~Pool #1" requested_mask=k denied_mask=k
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/uid_map comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/setgroups comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/gid_map comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/oom_score_adj comm=firefox.real requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="Sandbox Forked" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="Chroot Helper" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/uid_map comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/setgroups comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/gid_map comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/oom_score_adj comm=firefox.real requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/task/@{tid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="Sandbox Forked" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="Chroot Helper" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/oom_score_adj comm=firefox.real requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/uid_map comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/setgroups comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/gid_map comm="Sandbox Forked" requested_mask=w denied_mask=w
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/task/@{tid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="Sandbox Forked" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/fd/ comm="Chroot Helper" requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/task/@{tid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher open owner @{PROC}/@{pid}/stat comm=firefox.real requested_mask=r denied_mask=r
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libsoftokn3.so comm="Web Content" requested_mask=m denied_mask=m
ALLOWED torbrowser-launcher file_mmap owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libfreeblpriv3.so comm="Web Content" requested_mask=m denied_mask=m
odomingao commented 3 days ago

with -r for better readability (couldn't post both logs on OP because too many characters)

profile torbrowser-launcher {
  capability sys_admin,
  capability sys_chroot,

  @{bin}/cp      ix -> torbrowser-launcher//null-@{bin}/cp,
  @{bin}/dirname ix -> torbrowser-launcher//null-@{bin}/dirname,
  @{bin}/expr    ix -> torbrowser-launcher//null-@{bin}/expr,
  @{bin}/getconf ix -> torbrowser-launcher//null-@{bin}/getconf,
  @{bin}/gpg     ix -> torbrowser-launcher//gpg, # no new privs no new privs
  @{bin}/gpgconf ix -> torbrowser-launcher//gpg, # no new privs no new privs
  @{bin}/gpgsm   ix -> torbrowser-launcher//gpg, # no new privs no new privs
  @{bin}/id      ix -> torbrowser-launcher//null-@{bin}/id,
  @{bin}/rm      ix -> torbrowser-launcher//null-@{bin}/rm,

  /etc/mailcap r,
  /etc/mime.types r,

  owner ./abicheck                  ix -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/abicheck, # no new privs no new privs
  owner ./Browser/start-tor-browser ix -> torbrowser-start, # no new privs no new privs
  owner ./firefox                   ix -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox, # no new privs no new privs

  owner /var/cache/ w,
  owner /var/cache/fontconfig/ w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9 w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.NEW w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-2jR2DW w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-2WhhWO w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-4Vdy2f w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-8Dj0L5 w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-Bv8rik w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-eML6Ts w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-eSvP1K w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-jxlmj3 w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-pIbRxX w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-TqwN6L w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-UcdWx6 w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-Us6y74 w,
  owner /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-WW9gu0 w,
  owner /var/cache/fontconfig/CACHEDIR.TAG w,
  owner /var/cache/fontconfig/CACHEDIR.TAG.LCK w,
  owner /var/cache/fontconfig/CACHEDIR.TAG.NEW w,
  owner /var/cache/fontconfig/CACHEDIR.TAG.TMP-Gfk9Tc w,

  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part0/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part0/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part1/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part1/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part10/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part10/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part11/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part11/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part12/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part12/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part13/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part13/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part14/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part14/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part15/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part15/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part16/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part16/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part17/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part17/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part18/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part18/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part19/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part19/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part2/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part2/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part20/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part20/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part21/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part21/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part22/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part22/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part23/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part23/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part24/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part24/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part25/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part25/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part26/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part26/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part27/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part27/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part28/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part28/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part29/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part29/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part3/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part3/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part30/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part30/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part31/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part31/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part32/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part32/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part33/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part33/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part34/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part34/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part35/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part35/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part36/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part36/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part37/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part37/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part38/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part38/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part39/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part39/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part4/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part4/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part40/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part40/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part41/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part41/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part42/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part42/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part43/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part43/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part44/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part44/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part45/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part45/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part46/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part46/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part47/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part47/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part48/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part48/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part49/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part49/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part5/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part5/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part6/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part6/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part7/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part7/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part8/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part8/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part9/mesa_cache.db k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/.cache/mesa_shader_cache_db/part9/mesa_cache.idx k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/abicheck                         ix -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/abicheck,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox                          ix -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox.real                     ix -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/firefox.real,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/glxtest                          ix -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/glxtest,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libfreeblpriv3.so                m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libipcclientcerts.so             m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/liblgpllibs.so                   m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libmozgtk.so                     m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libmozsandbox.so                 m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libmozsqlite3.so                 m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libmozwayland.so                 m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libnspr4.so                      m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libnss3.so                       m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libnssckbi.so                    m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libnssutil3.so                   m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libplc4.so                       m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libplds4.so                      m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libsmime3.so                     m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libsoftokn3.so                   m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libssl3.so                       m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/libxul.so                        m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/.parentlock k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/content-prefs.sqlite k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/cookies.sqlite k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/favicons.sqlite k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/formhistory.sqlite k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/places.sqlite k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage-sync-v2.sqlite k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage-sync-v2.sqlite-shm k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage.sqlite k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage/default/moz-extension+++@{uuid}^userContextId k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage/ls-archive.sqlite k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/storage/permanent/chrome/idb/@{int10}rsegmnoittet-es.sqlite k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Tor/lock         k,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Tor/libcrypto.so.3    m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Tor/libevent-2.1.so.7 m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Tor/libssl.so.3       m,
  owner @{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Tor/tor               ix -> torbrowser-launcher//null-@{user_share_dirs}/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Tor/tor,

  owner /tmp/Temp-@{uuid}/ w,
  owner /tmp/tmp-kb9.xpi rw,
  owner /tmp/Tor ProjectUpdateLock-68FBC79E80ABEBE rwk,

  owner @{run}/user/@{uid}/gnupg/ w,

  owner @{sys}/bus/ r,

        @{PROC}/sys/kernel/random/uuid r,
  owner @{PROC}/@{pid}/cgroup r,
  owner @{PROC}/@{pid}/fd/ r,
  owner @{PROC}/@{pid}/gid_map w,
  owner @{PROC}/@{pid}/mountinfo r,
  owner @{PROC}/@{pid}/oom_score_adj w,
  owner @{PROC}/@{pid}/setgroups w,
  owner @{PROC}/@{pid}/stat r,
  owner @{PROC}/@{pid}/task/@{tid}/stat r,
  owner @{PROC}/@{pid}/uid_map w,

  owner /dev/ r,
  owner /dev/console rw,
  owner /dev/pts/ r,
  owner /dev/tty1 rw, # file_inherit

  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-2jR2DW,                    
  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-2WhhWO,                    
  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-4Vdy2f,                    
  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-8Dj0L5,                    
  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-Bv8rik,                    
  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-eML6Ts,                    
  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-eSvP1K,                    
  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-jxlmj3,                    
  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-pIbRxX,                    
  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-TqwN6L,                    
  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-UcdWx6,                    
  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-Us6y74,                    
  owner link /var/cache/fontconfig/@{hex32}-le64.cache-9.LCK -> /var/cache/fontconfig/@{hex32}-le64.cache-9.TMP-WW9gu0,                    
  owner link /var/cache/fontconfig/CACHEDIR.TAG.LCK -> /var/cache/fontconfig/CACHEDIR.TAG.TMP-Gfk9Tc,                             
  owner link @{user_share_dirs}/torbrowser/gnupg_homedir/.#lk0x@{hex16}.host.19x -> @{user_share_dirs}/torbrowser/gnupg_homedir/.#lk0x@{hex16}.host.19,
  owner link @{user_share_dirs}/torbrowser/gnupg_homedir/pubring.kbx.lock -> @{user_share_dirs}/torbrowser/gnupg_homedir/.#lk0x@{hex16}.host.19,       
}