From ccd103a29fcb723372b69c872e695c7693e0ca1c Mon Sep 17 00:00:00 2001
From: Adam Honse <calcprogrammer1@gmail.com>
Date: Thu, 30 Jul 2026 23:04:03 -0500
Subject: [PATCH] Enable systemd hardening in openrgb.service

---
 qt/openrgb.service | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/qt/openrgb.service b/qt/openrgb.service
index 4fcca6fc5..3ecc6b14b 100644
--- a/qt/openrgb.service
+++ b/qt/openrgb.service
@@ -8,5 +8,15 @@ Restart=always
 RuntimeDirectory=openrgb
 WorkingDirectory=/run/openrgb
 
+ProtectSystem=strict
+ProtectHome=true
+
+PrivateDevices=false
+ProtectKernelTunables=false
+ProtectControlGroups=false
+
+ReadWritePaths=/etc/openrgb
+ReadWritePaths=/run/openrgb
+
 [Install]
 WantedBy=multi-user.target