anchor.diff:  , runtimeShell
   , shared-mime-info
   , gsettings-desktop-schemas
  +
  +# Hardening
  +, graphene-hardened-malloc
  +, useHardenedMalloc ? graphene-hardened-malloc != null && builtins.elem stdenv.system graphene-hardened-malloc.meta.platforms
   
   # Whether to disable multiprocess support to work around crashing tabs
   # TODO: fix the underlying problem instead of this terrible work-around
  
positive.code:     #
      # XDG_DATA_DIRS is set to prevent searching system dirs (looking for .desktop & icons)
      exec env -i \
        TZ=":" \
        TZDIR="\''${TZDIR:-}" \
        LOCALE_ARCHIVE="\$LOCALE_ARCHIVE" \
  
negative.code:     GeoIPv6File $TBB_IN_STORE/TorBrowser/Data/Tor/geoip6
      EOF
  
      WRAPPER_LD_PRELOAD=${optionalString useHardenedMalloc
        "${graphene-hardened-malloc}/lib/libhardened_malloc.so"}
  
      WRAPPER_XDG_DATA_DIRS=${concatMapStringsSep ":" (x: "${x}/share") [
        gnome3.adwaita-icon-theme
        shared-mime-info
  