summaryrefslogtreecommitdiffstats
path: root/config/chroot_local-includes/usr/share
diff options
context:
space:
mode:
authorintrigeri <intrigeri@boum.org>2015-03-03 10:25:45 +0000
committerintrigeri <intrigeri@boum.org>2015-03-03 10:25:45 +0000
commit131d8f78a3cbd86f0fdba929e72130b80070c134 (patch)
tree7edd2164003fac96d2a25201ffe3e642b3f7b15b /config/chroot_local-includes/usr/share
parent9e7aa97db078177c8f36d227a22b8a79da5096b6 (diff)
parent5ec5f06708514a494044e40a175e8d80fa446e5a (diff)
Merge remote-tracking branch 'origin/master' into faq/7926-apt-get-upgradefaq/7926-apt-get-upgrade
Diffstat (limited to 'config/chroot_local-includes/usr/share')
-rw-r--r--config/chroot_local-includes/usr/share/X11/xorg.conf.d/90-tails.conf6
-rw-r--r--config/chroot_local-includes/usr/share/tails/desktop_wallpaper.pngbin1333 -> 1375 bytes
-rw-r--r--config/chroot_local-includes/usr/share/tails/i2p-browser/prefs.js33
-rw-r--r--config/chroot_local-includes/usr/share/tails/i2p-browser/theme.js2
-rw-r--r--config/chroot_local-includes/usr/share/tails/i2p-browser/userChrome.css95
-rw-r--r--config/chroot_local-includes/usr/share/tails/tbb-dist-url.txt2
-rw-r--r--config/chroot_local-includes/usr/share/tails/tbb-sha256sums.txt30
-rw-r--r--config/chroot_local-includes/usr/share/tails/torbrowser-AppArmor-profile.patch129
-rw-r--r--config/chroot_local-includes/usr/share/tails/unsafe-browser/prefs.js14
-rw-r--r--config/chroot_local-includes/usr/share/tails/unsafe-browser/theme.js2
-rw-r--r--config/chroot_local-includes/usr/share/tails/unsafe-browser/userChrome.css9
11 files changed, 306 insertions, 16 deletions
diff --git a/config/chroot_local-includes/usr/share/X11/xorg.conf.d/90-tails.conf b/config/chroot_local-includes/usr/share/X11/xorg.conf.d/90-tails.conf
new file mode 100644
index 0000000..f2e6c46
--- /dev/null
+++ b/config/chroot_local-includes/usr/share/X11/xorg.conf.d/90-tails.conf
@@ -0,0 +1,6 @@
+Section "InputClass"
+ Identifier "Tails-touchpad-configuration"
+ MatchIsTouchpad "on"
+ Option "TapButton1" "1"
+ Option "VertTwoFingerScroll" "1"
+EndSection
diff --git a/config/chroot_local-includes/usr/share/tails/desktop_wallpaper.png b/config/chroot_local-includes/usr/share/tails/desktop_wallpaper.png
index 3e03c44..51813ec 100644
--- a/config/chroot_local-includes/usr/share/tails/desktop_wallpaper.png
+++ b/config/chroot_local-includes/usr/share/tails/desktop_wallpaper.png
Binary files differ
diff --git a/config/chroot_local-includes/usr/share/tails/i2p-browser/prefs.js b/config/chroot_local-includes/usr/share/tails/i2p-browser/prefs.js
new file mode 100644
index 0000000..6cd2379
--- /dev/null
+++ b/config/chroot_local-includes/usr/share/tails/i2p-browser/prefs.js
@@ -0,0 +1,33 @@
+/* Disable proxy settings. We also set the other settings that
+ Torbutton requires to be happy, i.e. its icon is green. */
+pref("extensions.torbutton.http_port", 4444);
+pref("extensions.torbutton.http_proxy", "127.0.0.1");
+pref("extensions.torbutton.https_port", 4444);
+pref("extensions.torbutton.https_proxy", "127.0.0.1");
+pref("extensions.torbutton.custom.ftp_port", 4444);
+pref("extensions.torbutton.custom.ftp_proxy", "127.0.0.1");
+pref("extensions.torbutton.custom.http_port", 4444);
+pref("extensions.torbutton.custom.http_proxy", "127.0.0.1");
+pref("extensions.torbutton.custom.https_port", 4444);
+pref("extensions.torbutton.custom.https_proxy", "127.0.0.1");
+pref("extensions.torbutton.ftp_port", 4444);
+pref("extensions.torbutton.ftp_proxy", "127.0.0.1");
+pref("extensions.torbutton.gopher_port", 4444);
+pref("extensions.torbutton.gopher_proxy", "127.0.0.1");
+pref("extensions.torbutton.inserted_button", true);
+pref("extensions.torbutton.settings_method", "custom");
+pref("network.proxy.ftp", "127.0.0.1");
+pref("network.proxy.ftp_port", 4444);
+pref("network.proxy.http", "127.0.0.1");
+pref("network.proxy.http_port", 4444);
+pref("network.proxy.no_proxies_on", "127.0.0.1");
+pref("network.proxy.ssl", "127.0.0.1");
+pref("network.proxy.ssl_port", 4444);
+// Disable searching from the URL bar
+pref("keyword.enabled", false);
+// Hide "Get Addons" in Add-ons manager
+pref("extensions.getAddons.showPane", false);
+/* Prevent File -> Print or CTRL+P from causing the browser to hang
+ for several minutes while trying to communicate with CUPS, since
+ access to port 631 isn't allowed through. */
+pref("print.postscript.cups.enabled", false);
diff --git a/config/chroot_local-includes/usr/share/tails/i2p-browser/theme.js b/config/chroot_local-includes/usr/share/tails/i2p-browser/theme.js
new file mode 100644
index 0000000..3d79365
--- /dev/null
+++ b/config/chroot_local-includes/usr/share/tails/i2p-browser/theme.js
@@ -0,0 +1,2 @@
+user_pref("lightweightThemes.isThemeSelected", true);
+user_pref("lightweightThemes.usedThemes", "[{\"id\":\"1\",\"name\":\"I2P Browser\",\"headerURL\":\"file:///usr/share/pixmaps/red_dot.png\",\"footerURL\":\"file:///usr/share/pixmaps/red_dot.png\",\"textcolor\":\"#FFFFFF\",\"accentcolor\":\"#66ABEB\",\"updateDate\":0,\"installDate\":0}]");
diff --git a/config/chroot_local-includes/usr/share/tails/i2p-browser/userChrome.css b/config/chroot_local-includes/usr/share/tails/i2p-browser/userChrome.css
new file mode 100644
index 0000000..2bb4e5a
--- /dev/null
+++ b/config/chroot_local-includes/usr/share/tails/i2p-browser/userChrome.css
@@ -0,0 +1,95 @@
+/* Required, do not remove */
+@namespace url("http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul");
+
+/* Hide access to the bookmarks to try to prevent "data loss" due to users
+ * adding bookmarks even though the profile is destroyed at browser close.
+ * Keyboard shortcuts still work, but this makes it harder to 'accidentally'
+ * lose bookmarks.
+ *
+ * Note that any of the selectors that start with 'app' apply to the menu that
+ * is used if the main menu is hidden. Any that start with 'wrapper' are
+ * buttons that are normally visible within the 'customize toolbar' option. The
+ * others are probably self-explanatory.
+ */
+
+/* Remove the History and Bookmarks menus and buttons */
+#appmenu_bookmarks,
+#appmenu_history,
+#bookmarks,
+#bookmarks-menu-button,
+#bookmarksMenu,
+#history,
+#history-menu,
+#history-menu-button,
+#wrapper-history-button,
+#wrapper-bookmarks-button,
+
+/* Hide the sidebar menu (underneath View) since the default sidebars consist
+ * of history and bookmarks. Also disable the bookmark toolbar.
+ */
+#toggle_PersonalToolbar,
+#viewSidebarMenuMenu,
+
+/* Remove the "Star button" and "History Dropdown arrow" from the URL bar
+ * since neither history nor bookmarks are saved.
+ */
+#star-button,
+[anonid="historydropmarker"],
+
+/* Remove bookmark options from the context menus */
+#context-bookmarkframe,
+#context-bookmarklink,
+#context-bookmarkpage,
+
+/* Hide the option for emailing links since it's doomed to failure
+ * without a configured email client.
+ */
+menuitem[command="Browser:SendLink"],
+
+/* Hide Print options */
+/*
+#menu_printSetup,
+#menu_printPreview,
+#menu_print,
+#menu_print + menuseparator,
+[command="cmd_print"],
+*/
+
+/* Hide the sync functionality which won't work with I2P */
+#BrowserPreferences radio[pane="paneSync"],
+#sync-button,
+#sync-menu-button,
+#sync-setup,
+#sync-setup-appmenu,
+#sync-status-button,
+#sync-syncnowitem-appmenu,
+#wrapper-sync-button,
+
+/* Without I2P search engines defined, the search bar is useless.
+ * Since there are no I2P search engines added to Tails (yet),
+ * let's hide it and the Update Pane in Firefox's Preferences.
+ */
+#search-container,
+#updateTab,
+
+/* Hide options in the Help menu that lead to disallowed resources on the
+ * Internet.
+ */
+#appmenu_feedbackPage,
+#appmenu_gettingStarted,
+#appmenu_openHelp,
+#feedbackPage,
+#gettingStarted,
+#menu_HelpPopup_reportPhishingtoolmenu,
+#menu_openHelp,
+
+/* Hide the TorButton button from the toolbar */
+#torbutton-button,
+
+/* Hide TorBrowser Health Report and its configuration option */
+#appmenu_healthReport,
+#dataChoicesTab,
+#healthReport
+
+/* Now the actual hiding */
+{display: none !important}
diff --git a/config/chroot_local-includes/usr/share/tails/tbb-dist-url.txt b/config/chroot_local-includes/usr/share/tails/tbb-dist-url.txt
index 02091a4..18f0691 100644
--- a/config/chroot_local-includes/usr/share/tails/tbb-dist-url.txt
+++ b/config/chroot_local-includes/usr/share/tails/tbb-dist-url.txt
@@ -1 +1 @@
-http://people.torproject.org/~gk/builds/
+http://torbrowser-archive.tails.boum.org/
diff --git a/config/chroot_local-includes/usr/share/tails/tbb-sha256sums.txt b/config/chroot_local-includes/usr/share/tails/tbb-sha256sums.txt
index 29f3620..f8bae81 100644
--- a/config/chroot_local-includes/usr/share/tails/tbb-sha256sums.txt
+++ b/config/chroot_local-includes/usr/share/tails/tbb-sha256sums.txt
@@ -1,15 +1,15 @@
-3038430abae8be9e4c750311332d101035a05698df33c9cd1e1f4caf86354ef1 tor-browser-linux32-4.0.2_ar.tar.xz
-45473a6d262d84d0f52b35a036301d35c412f072a5495b62de9bbe7a25623e79 tor-browser-linux32-4.0.2_de.tar.xz
-3e4f9d08c4b194cbe9efd879e25c1581c6f58b6bd034ce037aae479edb9ab0b3 tor-browser-linux32-4.0.2_en-US.tar.xz
-ef648c5971dd2987747bd833dc45493bfb5a7b0e58caca69ca2f535c58c4a052 tor-browser-linux32-4.0.2_es-ES.tar.xz
-f7b5badc65519e9b3e31289415180a451dd4c1a6839d37de0a4fb2d64515f380 tor-browser-linux32-4.0.2_fa.tar.xz
-d59369130530bfa1e9b962f593d7042285014644da06e6f6e62018256fb4950c tor-browser-linux32-4.0.2_fr.tar.xz
-5f26e3b5478ad7bef56f6ecd5c3b6ee71324aabacf4d3f1751fa67e2c12a9abc tor-browser-linux32-4.0.2_it.tar.xz
-16786224af7ec671d2526d08438082e0fd0f1f3346f91fba4b5d4eb78ee0451b tor-browser-linux32-4.0.2_ko.tar.xz
-7b7a2b2b4fcdc1925e910628d558b8b51c54c8ef751136c782fa4a997d0fadb0 tor-browser-linux32-4.0.2_nl.tar.xz
-361a93a91c0445d41974c57cd43f91a02d734ffd820c72a2a4c3d3a91ec0a0fb tor-browser-linux32-4.0.2_pl.tar.xz
-bf7ba77b2f711d6ef106ae927fef96e83df59d581db54661ee37709aabbb5fdb tor-browser-linux32-4.0.2_pt-PT.tar.xz
-9eafcb51a79b076ab22ba581976e646c1a8b6e67b95987ddfc0b7a5e31ba1229 tor-browser-linux32-4.0.2_ru.tar.xz
-684be583d0020d3d3667699965f5c0ba01d8fbe71abfb0d1f240e1d936767de2 tor-browser-linux32-4.0.2_tr.tar.xz
-1701e9414f676f880b2256ff00940af1f3d7070825a530e210251360d43a83aa tor-browser-linux32-4.0.2_vi.tar.xz
-2969c05faf3de2f9660a8f38cfb1ba2a7e81a91eafb7155ebdcbc0f95f040375 tor-browser-linux32-4.0.2_zh-CN.tar.xz
+81560cc55e1eba80f25d67fcdee65c5f24d8190598bdad3fa0a561739d2b6f41 tor-browser-linux32-4.0.4_ar.tar.xz
+71d4e9c19939796111344e8a172c3f737869dcf894f5096f5005d555945ee8ff tor-browser-linux32-4.0.4_de.tar.xz
+046dbdbfd1944b44a073e4e6f0ca6fd0a3974d4a5230967dfbe1d49a49b283eb tor-browser-linux32-4.0.4_en-US.tar.xz
+297aad855faa0cd1d65ac004eb13fb1d8c93f0a8b737d01c51cd63f8a728bfaa tor-browser-linux32-4.0.4_es-ES.tar.xz
+3803f01af380d917f63177cd553796b91e7de73e4ccc9695fa85658540f00d48 tor-browser-linux32-4.0.4_fa.tar.xz
+5fda5bd4735390c71451f5f2262b8b08341595bc029003087728a706b2adbdd3 tor-browser-linux32-4.0.4_fr.tar.xz
+7ecaba7217f57f4653dc1cb071181e5c1fe674f541e827cbdd006bdf54bfe367 tor-browser-linux32-4.0.4_it.tar.xz
+9df928063d3725e049da619b5ff7762de065de2aac487024bcadbfdddcd22837 tor-browser-linux32-4.0.4_ko.tar.xz
+4ec587cc75dd4b4b9f0dad6fb663cdea540ea9158b37de1f98da2376b24c9696 tor-browser-linux32-4.0.4_nl.tar.xz
+d41293947c3cfb78a639b6ebe88af395b147f89933d77ebffaba42a10794a26f tor-browser-linux32-4.0.4_pl.tar.xz
+d343b3e29d0c250cb7a2c32b5cf07d74e562ef8e5590e6787a31728d49b7865c tor-browser-linux32-4.0.4_pt-PT.tar.xz
+21ea5ca1c31d48341aa4608498a2db91c48c0e0e778d0dfd86ab2a5bfa6e8127 tor-browser-linux32-4.0.4_ru.tar.xz
+19651adbe0b0f2a73dd7aa484ba8339483c4cf32cb7829819b9f0b3abe063515 tor-browser-linux32-4.0.4_tr.tar.xz
+07226af742f294c521a0cfdb40384808bd8f9b0d572eea0342e198b5d5da991b tor-browser-linux32-4.0.4_vi.tar.xz
+2cdb1706dd7afbab8587f1e8dbcd13fb32ecf941f580f815aab95b21475004ca tor-browser-linux32-4.0.4_zh-CN.tar.xz
diff --git a/config/chroot_local-includes/usr/share/tails/torbrowser-AppArmor-profile.patch b/config/chroot_local-includes/usr/share/tails/torbrowser-AppArmor-profile.patch
new file mode 100644
index 0000000..baef2ba
--- /dev/null
+++ b/config/chroot_local-includes/usr/share/tails/torbrowser-AppArmor-profile.patch
@@ -0,0 +1,129 @@
+diff --git a/apparmor/torbrowser.Browser.firefox b/apparmor/torbrowser.Browser.firefox
+index 0df7ad9..6d1346c 100644
+--- a/apparmor/torbrowser.Browser.firefox
++++ b/apparmor/torbrowser.Browser.firefox
+@@ -1,13 +1,15 @@
+ # Last modified
+ #include <tunables/global>
+
+-/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox {
++/usr/local/lib/tor-browser/firefox {
+ #include <abstractions/gnome>
++ #include <abstractions/gstreamer>
++ #include <abstractions/ibus>
+
+ # Uncomment the following line if you don't want the Tor Browser
+ # to have direct access to your sound hardware. Note that this is not
+ # enough to have working sound support in Tor Browser.
+- # #include <abstractions/audio>
++ #include <abstractions/audio>
+
+ # Uncomment the following lines if you want to give the Tor Browser read-write
+ # access to most of your personal files.
+@@ -17,40 +19,52 @@
+ #dbus,
+ network tcp,
+
++ /etc/asound.conf r,
+ deny /etc/host.conf r,
+- deny /etc/hosts r,
+- deny /etc/nsswitch.conf r,
++ /etc/hosts r,
++ /etc/nsswitch.conf r,
+ deny /etc/resolv.conf r,
+- deny /etc/passwd r,
+- deny /etc/group r,
++ /etc/passwd r,
++ /etc/group r,
+ deny /etc/mailcap r,
++ deny @{HOME}/.local/share/gvfs-metadata/home r,
++ deny /run/resolvconf/resolv.conf r,
+
+- deny /etc/machine-id r,
+- deny /var/lib/dbus/machine-id r,
++ /etc/machine-id r,
++ /var/lib/dbus/machine-id r,
+
+ @{PROC}/[0-9]*/mountinfo r,
+ @{PROC}/[0-9]*/stat r,
+ @{PROC}/[0-9]*/task/*/stat r,
+ @{PROC}/sys/kernel/random/uuid r,
+
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/ r,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/* r,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/.** rwk,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/.** rwk,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/ r,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/** r,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/*.so mr,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/components/*.so mr,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/browser/components/*.so mr,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox rix,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/TorBrowser/,}Data/Browser/profiles.ini r,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/TorBrowser/,}Data/Browser/profile.default/ r,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/TorBrowser/,}Data/Browser/profile.default/** rwk,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/TorBrowser/,}Tor/tor Px,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/,}Desktop/ rw,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/,}Desktop/** rwk,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/,}Downloads/ rw,
+- owner @{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/{Browser/,}Downloads/** rwk,
++ /usr/local/lib/tor-browser/ r,
++ /usr/local/lib/tor-browser/** r,
++ /usr/local/lib/tor-browser/*.so{,.6} mr,
++ /usr/local/lib/tor-browser/**/*.so mr,
++ /usr/local/lib/tor-browser/browser/* r,
++ /usr/local/lib/tor-browser/TorBrowser/Data/Browser/profiles.ini r,
++
++ owner "@{HOME}/Tor Browser/" rw,
++ owner "@{HOME}/Tor Browser/**" rwk,
++ owner "@{HOME}/Persistent/Tor Browser/" rw,
++ owner "@{HOME}/Persistent/Tor Browser/**" rwk,
++ owner "/live/persistence/TailsData_unlocked/Persistent/Tor Browser/" rw,
++ owner "/live/persistence/TailsData_unlocked/Persistent/Tor Browser/**" rwk,
++ owner @{HOME}/.mozilla/firefox/bookmarks/places.sqlite rwk,
++ owner /live/persistence/TailsData_unlocked/bookmarks/places.sqlite rwk,
++ owner @{HOME}/.tor-browser/profile.default/ r,
++ owner @{HOME}/.tor-browser/profile.default/** rwk,
++
++ /etc/xul-ext/ r,
++ /etc/xul-ext/** r,
++ /usr/local/share/tor-browser-extensions/ r,
++ /usr/local/share/tor-browser-extensions/** rk,
++ /usr/share/xul-ext/ r,
++ /usr/share/xul-ext/** r,
++
++ /usr/share/doc/tails/website/ r,
++ /usr/share/doc/tails/website/** r,
+
+ /etc/mailcap r,
+ /etc/mime.types r,
+@@ -65,6 +79,7 @@
+
+ /sys/devices/system/cpu/ r,
+ /sys/devices/system/cpu/present r,
++ deny /sys/devices/virtual/block/*/uevent r,
+
+ # Should use abstractions/gstreamer instead once merged upstream
+ /etc/udev/udev.conf r,
+@@ -72,6 +87,21 @@
+ /sys/devices/pci[0-9]*/**/uevent r,
+ owner /{dev,run}/shm/shmfd-* rw,
+
++ /usr/lib/@{multiarch}/gstreamer[0-9]*.[0-9]*/gstreamer-[0-9]*.[0-9]*/gst-plugin-scanner Cix -> gst_plugin_scanner,
++ owner @{HOME}/.gstreamer*/ rw,
++ owner @{HOME}/.gstreamer*/** rw,
++ owner @{PROC}/[0-9]*/fd/ r,
++
++ deny /usr/bin/pulseaudio x,
++
++ /usr/local/lib/tor-browser/firefox Pix,
++ /usr/bin/seahorse-tool Ux,
++
++ # Spell checking (the "enchant" abstraction includes these rules
++ # too, but it allows way more stuff than what we need)
++ /usr/share/hunspell/ r,
++ /usr/share/hunspell/* r,
++
+ # KDE 4
+ owner @{HOME}/.kde/share/config/* r,
+
diff --git a/config/chroot_local-includes/usr/share/tails/unsafe-browser/prefs.js b/config/chroot_local-includes/usr/share/tails/unsafe-browser/prefs.js
new file mode 100644
index 0000000..b88df8f
--- /dev/null
+++ b/config/chroot_local-includes/usr/share/tails/unsafe-browser/prefs.js
@@ -0,0 +1,14 @@
+// Disable proxying in the chroot
+pref("network.proxy.type", 0);
+pref("network.proxy.socks_remote_dns", false);
+
+// Disable update checking
+pref("app.update.enabled", false);
+pref("extensions.update.enabled", false);
+
+/* Prevent File -> Print or CTRL+P from causing the browser to hang
+ for several minutes while trying to communicate with CUPS, since
+ access to port 631 isn't allowed through. */
+pref("print.postscript.cups.enabled", false);
+// Hide "Get Addons" in Add-ons manager
+pref("extensions.getAddons.showPane", false);
diff --git a/config/chroot_local-includes/usr/share/tails/unsafe-browser/theme.js b/config/chroot_local-includes/usr/share/tails/unsafe-browser/theme.js
new file mode 100644
index 0000000..717c3b1
--- /dev/null
+++ b/config/chroot_local-includes/usr/share/tails/unsafe-browser/theme.js
@@ -0,0 +1,2 @@
+pref("lightweightThemes.isThemeSelected", true);
+pref("lightweightThemes.usedThemes", "[{\"id\":\"1\",\"name\":\"Unsafe Browser\",\"headerURL\":\"file:///usr/share/pixmaps/red_dot.png\",\"footerURL\":\"file:///usr/share/pixmaps/red_dot.png\",\"textcolor\":\"#FFFFFF\",\"accentcolor\":\"#CC0000\",\"updateDate\":0,\"installDate\":0}]");
diff --git a/config/chroot_local-includes/usr/share/tails/unsafe-browser/userChrome.css b/config/chroot_local-includes/usr/share/tails/unsafe-browser/userChrome.css
new file mode 100644
index 0000000..d83bc87
--- /dev/null
+++ b/config/chroot_local-includes/usr/share/tails/unsafe-browser/userChrome.css
@@ -0,0 +1,9 @@
+/* Required, do not remove */
+@namespace url("http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul");
+
+/* Hide TorBrowser Health Report and its configuration option */
+#appmenu_healthReport,
+#dataChoicesTab,
+#healthReport
+
+{display: none !important}