Gather apparmor/selinux/seatbelt profiles for each component of TBB
It's increasingly clear that shipping TBB without any "system call permissions" wrappers is an arms race that is too easy to lose. Bug 5741 is the latest of what will continue to be many instances.
The Tor wiki has a variety of instructions on putting your TBB in a VM, or running it wrapped by apparmor, or somebody saying the word SELinux, etc.
We should gather all these instructions together, and start vetting them with the goal of integrating as many as we can into the main build processes, and providing the rest as "for experts, you can be even safer if".
We need a volunteer with good security taste to get this started. I could easily see this project being a bounty too.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information