4 SystemCallFilter=@default @raw-io @system-service @known
7 # binds host kodi home folder into nspawn
13 BindReadOnly=/dev/bus/usb
15 BindReadOnly=/dev/input
16 BindReadOnly=/dev/lirc0
17 BindReadOnly=/dev/vga_arbiter
18 BindReadOnly=/lib/modules
19 # pulse need to be started in system mode with the following module and option:
20 # load-module module-native-protocol auth-authorize-anonymous
21 BindReadOnly=/run/pulse