After updating to Tor Browser 14.0, Tor Browser shows a pop-up that I have now less protection

Hello, thank you for all your engagement in this thread, and thanks to everyone else for providing so much information. I am here to report a fix for this issue for debian based systems, and potentially others! I tried for a long time to make a new apparmor profile for my tor installation but it was never recognised. There are a lot of things that are required to get apparmor to recognise the profile.

The Fix
There is a project called torbrowser-launcher, the repo can be viewed here: GitHub - torproject/torbrowser-launcher: Securely and easily download, verify, install, and launch Tor Browser in Linux. This repository is a mirror of https://gitlab.torproject.org/tpo/applications/torbrowser-launcher

It is easily installable on debian systems with the command: sudo apt-get install torbrowser-launcher. The great thing about this is that the developers create an apparmor profile for tor browser on your system when you install it. From the GitHub repo:

  • Downloads and installs the most recent version of Tor Browser in your language and for your computer’s architecture, or launches Tor Browser if it’s already installed (Tor Browser will automatically update itself)
  • Verifies Tor Browser’s signature for you, to ensure the version you downloaded was cryptographically signed by Tor developers and was not tampered with
  • Adds “Tor Browser” and “Tor Browser Launcher Settings” application launcher to your desktop environment’s menu
  • Includes AppArmor profiles to make a Tor Browser compromise not as bad

This worked for me, when using the torbrowser-launcher, the message is no longer present. I tried to fix the issue manually for quite some time before I came across this.

I have done some reading and the repo seems legit. Apparently it comes included with some distros. If anyone has knowledge that the repo is not legit, please let me know. But otherwise, enjoy the fix!

2 Likes