Bug 41050: Improve disk leak sanitization on startup.

export HOME

# Prevent disk leaks in $HOME/.local/share (tor-browser#17560)

function erase_leaky() {

	local leaky="$1"

	[ -e "$leaky" ] &&

	( srm -r "$leaky" ||

	  wipe -r "$leaky" ||

	  find "$leaky" -type f -exec shred -u {} \; ;

	  rm -rf "$leaky"

	) > /dev/null 2>&1

}

local_dir="$HOME/.local/"

share_dir="$local_dir/share"

# We don't want to mess with symlinks, possibly pointing outside the

# Browser directory (tor-browser-build#41050).

# We're not using realpath/readlink for consistency with the (possibly

# outdated) availability assumptions made elsewhere in this script.

if ! [ -L "$local_dir" -o -L "$share_dir" ]; then

	if [ -d "$share_dir" ]; then

    ( srm -r "$share_dir" ||

      wipe -r "$share_dir" ||

      find "$share_dir" -type f -exec shred -u {} \; ;

      rm -rf "$share_dir"

    ) > /dev/null 2>&1

		for leaky_path in "gvfs-metadata" "recently-used.xbel"; do

			erase_leaky "$share_dir/$leaky_path"

		done

	else

		mkdir -p "$local_dir"

	fi

	ln -fs /dev/null "$share_dir"

fi

[ -L "$HOME/.cache" ] || erase_leaky "$HOME/.cache/nvidia"

[% IF c("var/tor-browser") -%]

SYSARCHITECTURE=$(getconf LONG_BIT)