tor-browser is now tor-browser-en

roles/browsers/files/firejail/tor-browser.profile

@@ -0,0 +1,10 @@
+noblacklist ${HOME}/.tor-browser
+
+mkdir ${HOME}/.tor-browser
+whitelist ${HOME}/.tor-browser
+
+# Add tor-browser to private-bin
+private-bin bash,cp,dirname,env,expr,file,getconf,gpg,grep,id,ln,mkdir,python*,readlink,rm,sed,sh,tail,tar,tclsh,test,tor-browser-en,torbrowser-launcher,tor-browser,xz
+
+# Redirect
+include torbrowser-launcher.profile

roles/browsers/tasks/main.yml

@@ -77,24 +77,32 @@
   tags:
     - chromium
 
-- name: Install tor-browser-en
+- name: Install tor-browser
   aur:
-    name: tor-browser-en
+    name: tor-browser
     user: "{{ user.name }}"
     skip_pgp: yes
   tags:
     - tor-browser
     - aur
 
-- name: Jail tor-browser-en
+- name: Jail tor-browser
   file:
     src: /usr/bin/firejail
-    dest: /usr/local/bin/tor-browser-en
+    dest: /usr/local/bin/tor-browser
     state: link
   tags:
     - tor-browser
     - firejail
 
+- name: Push tor-browser firejail profile
+  copy: src=firejail/tor-browser.profile dest=/usr/local/etc/firejail/tor-browser.profile
+  notify:
+    - activate firejail profiles
+  tags:
+    - tor-browser
+    - firejail
+
 - name: Install qutebrowser
   pacman:
     name: qutebrowser