Official `sandboxed-tor-browser` binaries break with PaX MPROTECT.
I suspect this is something to do with our deterministic build setup, as I do development on a box with a grsec kernel. The binary itself will run fine if you add the override attribute with setfatter or paxd, but it would be nice if it worked out of the box.