diff -up usbguard-1.1.3/usbguard.service.in.orig usbguard-1.1.3/usbguard.service.in --- usbguard-1.1.3/usbguard.service.in.orig 2024-06-12 14:36:13.192536970 +0200 +++ usbguard-1.1.3/usbguard.service.in 2024-06-12 14:36:21.110609346 +0200 @@ -8,7 +8,7 @@ OOMScoreAdjust=-1000 AmbientCapabilities= CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_AUDIT_WRITE DevicePolicy=closed -ExecStart=%sbindir%/usbguard-daemon -f -s -c %sysconfdir%/usbguard/usbguard-daemon.conf +ExecStart=%sbindir%/usbguard-daemon -f -s -K -c %sysconfdir%/usbguard/usbguard-daemon.conf IPAddressDeny=any LockPersonality=yes MemoryDenyWriteExecute=yes