aboutsummaryrefslogtreecommitdiff
path: root/contrib
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2014-09-03 13:28:46 -0400
committerNick Mathewson <nickm@torproject.org>2014-09-03 13:28:46 -0400
commitf58cdb3be70ef7b30875efe5c2894efc4e273953 (patch)
treea00c835b11ab05a7b8becbf6e439863a82d58739 /contrib
parented8f020e205267e6270494634346ab68d830e1d8 (diff)
parent9f0161f73db38ab0cf849dcca66f645d3036d9a9 (diff)
downloadtor-f58cdb3be70ef7b30875efe5c2894efc4e273953.tar.gz
tor-f58cdb3be70ef7b30875efe5c2894efc4e273953.zip
Merge remote-tracking branch 'intrigeri/bug12751-systemd-filesystem-sandbox'
Diffstat (limited to 'contrib')
-rw-r--r--contrib/dist/tor.service.in3
1 files changed, 3 insertions, 0 deletions
diff --git a/contrib/dist/tor.service.in b/contrib/dist/tor.service.in
index 2fe51c75d9..8c70ccc6e3 100644
--- a/contrib/dist/tor.service.in
+++ b/contrib/dist/tor.service.in
@@ -19,6 +19,9 @@ PrivateTmp = yes
DeviceAllow = /dev/null rw
DeviceAllow = /dev/urandom r
InaccessibleDirectories = /home
+ReadOnlyDirectories = /
+ReadWriteDirectories = @LOCALSTATEDIR@/lib/tor
+ReadWriteDirectories = @LOCALSTATEDIR@/log/tor
[Install]
WantedBy = multi-user.target