subgraph-oz/profiles/torbrowser-launcher.json

{
"path": "/usr/bin/torbrowser-launcher"
, "watchdog": "start-tor-browser"
, "allowed_groups": ["debian-tor"]
, "xserver": {
	"enabled": true
	, "enable_tray": true
	, "tray_icon":"/usr/share/pixmaps/torbrowser80.xpm"
}
, "networking":{
	"type":"empty"
	, "sockets": [
		{"type":"client", "proto":"tcp", "port":9050}
	]
}
, "whitelist": [
	{"path":"${HOME}/.local/share/torbrowser"}
	, {"path":"${HOME}/.cache/torbrowser"}
	, {"path":"${HOME}/.config/torbrowser"}
	, {"path":"${HOME}/Downloads/TorBrowser"}
	, {"path":"/var/lib/oz/cells.d/torbrowser-launcher.json"}
	, {"path":"/var/lib/oz/cells.d/generic-blacklist.seccomp"}
]
, "blacklist": [
]
, "environment": [
	{"name":"TOR_SKIP_LAUNCH"}
	, {"name":"TOR_SOCKS_HOST"}
	, {"name":"TOR_SOCKS_PORT"}
	, {"name":"TOR_CONTROL_PORT"}
	, {"name":"TOR_CONTROL_PASSWD"}
	, {"name":"TOR_CONTROL_AUTHENTICATE"}
	, {"name":"TOR_CONTROL_COOKIE_AUTH_FILE"}
]
, "seccomp": {
        "mode":"blacklist"
        , "enforce": true
        , "seccomp_whitelist":""
        , "seccomp_blacklist":"/var/lib/oz/cells.d/generic-blacklist.seccomp"}
}