From 22e5367db4e434432091ca61a51947020be3992f Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 13 Oct 2024 23:24:50 +0100
Subject: [PATCH] fix(profile): torbrowser allow download.

fix #539
---
 apparmor.d/groups/browsers/torbrowser | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apparmor.d/groups/browsers/torbrowser b/apparmor.d/groups/browsers/torbrowser
index 8d8336d6..5068886c 100644
--- a/apparmor.d/groups/browsers/torbrowser
+++ b/apparmor.d/groups/browsers/torbrowser
@@ -42,6 +42,9 @@ profile torbrowser @{exec_path} flags=(attach_disconnected) {
   owner "@{tmp}/Tor Project*" rwk,
   owner "@{tmp}/Tor Project*/" rw,
   owner "@{tmp}/Tor Project*/**" rwk,
+  owner @{tmp}/@{rand8}.* rw,
+  owner @{tmp}/mozilla_pc@{int}/ rw,
+  owner @{tmp}/mozilla_pc@{int}/* rwk,
 
   # Due to the nature of the browser, we silence much more than for Firefox.
   deny capability sys_ptrace,