browser sandbox profile too restrictive on OSX 10.12.2
A user reported via a blog comment that the browser fails to start via ./start-browser-with-sandbox on OSX 10.2.2. See: https://blog.torproject.org/blog/tor-browser-65a6-released#comment-225250
As I commented on the blog, moving the line that reads (subpath "/usr/lib")
within tb.sb from the (allow file-read-metadata ... )
section to the (allow file-read* ...)
section seems to fix the problem.