diff --git a/util/endlessh.service b/util/endlessh.service
index 8e37031..fd12a00 100644
--- a/util/endlessh.service
+++ b/util/endlessh.service
@@ -22,6 +22,7 @@ PrivateTmp=true
 PrivateDevices=true
 ProtectSystem=full
 ProtectHome=true
+InaccessiblePaths=/run /var
 
 ## If you want Endlessh to bind on ports < 1024
 ## 1) run: