commit 9f0161f73db38ab0cf849dcca66f645d3036d9a9 Author: intrigeri <intrigeri@boum.org> Date: Wed Aug 27 03:13:32 2014 +0000 Add changes file for #12751. --- changes/bug12751-systemd-filesystem-sandbox | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/changes/bug12751-systemd-filesystem-sandbox b/changes/bug12751-systemd-filesystem-sandbox new file mode 100644 index 0000000..0abaa4c --- /dev/null +++ b/changes/bug12751-systemd-filesystem-sandbox @@ -0,0 +1,5 @@ + o Distribution: + - systemd unit file: only allow tor to write to /var/lib/tor + and /var/log/tor. The rest of the filesystem is accessible + for reading only. + Patch by intrigeri; resolves ticket 12751.