4 SystemCallFilter=@default @raw-io @system-service @known
7 # binds host kodi home folder into nspawn
15 Bind=/mnt/fook/torrents
20 BindReadOnly=/dev/bus/usb
22 BindReadOnly=/dev/input
23 BindReadOnly=/dev/lirc0
24 BindReadOnly=/dev/vga_arbiter
25 BindReadOnly=/lib/modules
26 # pulse need to be started in system mode with the following module and option:
27 # load-module module-native-protocol auth-authorize-anonymous
28 BindReadOnly=/run/pulse