anchor.diff:      GeoIPv6File $TBB_IN_STORE/TorBrowser/Data/Tor/geoip6
       EOF
   
  +    WRAPPER_LD_PRELOAD=${optionalString useHardenedMalloc
  +      "${graphene-hardened-malloc}/lib/libhardened_malloc.so"}
  +
       WRAPPER_XDG_DATA_DIRS=${concatMapStringsSep ":" (x: "${x}/share") [
         gnome3.adwaita-icon-theme
         shared-mime-info
  
positive.code:     #
      # XDG_DATA_DIRS is set to prevent searching system dirs (looking for .desktop & icons)
      exec env -i \
        TZ=":" \
        TZDIR="\''${TZDIR:-}" \
        LOCALE_ARCHIVE="\$LOCALE_ARCHIVE" \
  
negative.code: , runtimeShell
  , shared-mime-info
  , gsettings-desktop-schemas
  
  # Hardening
  , graphene-hardened-malloc
  , useHardenedMalloc ? graphene-hardened-malloc != null && builtins.elem stdenv.system graphene-hardened-malloc.meta.platforms
  
  # Whether to disable multiprocess support to work around crashing tabs
  # TODO: fix the underlying problem instead of this terrible work-around
  