diff -up usbguard-1.0.0/usbguard.service.in.orig usbguard-1.0.0/usbguard.service.in --- usbguard-1.0.0/usbguard.service.in.orig 2021-03-17 14:16:21.675374844 +0100 +++ usbguard-1.0.0/usbguard.service.in 2021-03-17 14:16:29.056373213 +0100 @@ -5,7 +5,7 @@ Documentation=man:usbguard-daemon(8) [Service] AmbientCapabilities= -CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER +CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_AUDIT_WRITE DevicePolicy=closed ExecStart=%sbindir%/usbguard-daemon -f -s -c %sysconfdir%/usbguard/usbguard-daemon.conf IPAddressDeny=any