diff --git a/usbguard.service.in b/usbguard.service.in
index 1c131884..138a5a2d 100644
--- a/usbguard.service.in
+++ b/usbguard.service.in
@@ -6,7 +6,7 @@ Documentation=man:usbguard-daemon(8)
 [Service]
 OOMScoreAdjust=-1000
 AmbientCapabilities=
-CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_AUDIT_WRITE
+CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_AUDIT_WRITE CAP_DAC_READ_SEARCH
 DevicePolicy=closed
 ExecStart=%sbindir%/usbguard-daemon -f -s -c %sysconfdir%/usbguard/usbguard-daemon.conf
 IPAddressDeny=any