diff -up usbguard-1.1.4/usbguard.service.in.orig usbguard-1.1.4/usbguard.service.in --- usbguard-1.1.4/usbguard.service.in.orig 2025-11-04 09:30:06.066901646 +0100 +++ usbguard-1.1.4/usbguard.service.in 2025-11-04 09:30:08.179271961 +0100 @@ -8,7 +8,7 @@ OOMScoreAdjust=-1000 AmbientCapabilities= CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_AUDIT_WRITE CAP_DAC_READ_SEARCH DevicePolicy=closed -ExecStart=%sbindir%/usbguard-daemon -f -s -c %sysconfdir%/usbguard/usbguard-daemon.conf +ExecStart=%sbindir%/usbguard-daemon -f -s -K -c %sysconfdir%/usbguard/usbguard-daemon.conf IPAddressDeny=any LockPersonality=yes MemoryDenyWriteExecute=yes