Add changes file for #12751.

diff --git a/changes/bug12751-systemd-filesystem-sandbox b/changes/bug12751-systemd-filesystem-sandbox
new file mode 100644 (file)
index 0000000..0abaa4c
--- /dev/null
+++ b/changes/bug12751-systemd-filesystem-sandbox
@@ -0,0 +1,5 @@
+  o Distribution:
+    - systemd unit file: only allow tor to write to /var/lib/tor
+      and /var/log/tor. The rest of the filesystem is accessible
+      for reading only.
+      Patch by intrigeri; resolves ticket 12751.