4 SystemCallFilter=@default @raw-io @system-service @known
7 # binds host kodi home folder into nspawn
19 # pulse need to be started in system mode with the following module and option:
20 # load-module module-native-protocol auth-authorize-anonymous
21 BindReadOnly=/run/pulse