diff --git a/pillar/role/onion-router.sls b/pillar/role/onion-router.sls
new file mode 100644
index 0000000..a50c802
--- /dev/null
+++ b/pillar/role/onion-router.sls
@@ -0,0 +1,5 @@
+{%- if grains['kernel'] == 'Linux' %}
+tor:
+  torrc:
+    Sandbox: 1
+{%- endif %}
diff --git a/salt/role/onion-router.sls b/salt/role/onion-router.sls
new file mode 100644
index 0000000..376a69e
--- /dev/null
+++ b/salt/role/onion-router.sls
@@ -0,0 +1,2 @@
+include:
+  - tor