4 SystemCallFilter=@default @raw-io @system-service @known
7 # binds host kodi home folder into nspawn
15 Bind=/mnt/fook/torrents
20 BindReadOnly=/dev/bus/usb
22 BindReadOnly=/dev/input
23 BindReadOnly=/dev/uinput
24 # libinput reads this to know about devices
25 BindReadOnly=/run/udev
26 BindReadOnly=/dev/lirc0
27 BindReadOnly=/dev/vga_arbiter
28 BindReadOnly=/lib/modules
29 # pulse need to be started in system mode with the following module and option:
30 # load-module module-native-protocol auth-authorize-anonymous
31 BindReadOnly=/run/pulse