diff --git a/qt/openrgb.service b/qt/openrgb.service
index 4fcca6fc5..3ecc6b14b 100644
--- a/qt/openrgb.service
+++ b/qt/openrgb.service
@@ -8,5 +8,15 @@ Restart=always
 RuntimeDirectory=openrgb
 WorkingDirectory=/run/openrgb
 
+ProtectSystem=strict
+ProtectHome=true
+
+PrivateDevices=false
+ProtectKernelTunables=false
+ProtectControlGroups=false
+
+ReadWritePaths=/etc/openrgb
+ReadWritePaths=/run/openrgb
+
 [Install]
 WantedBy=multi-user.target