diff --git a/install.sh b/install.sh
index b6ff246..4124fbe 100644
--- a/install.sh
+++ b/install.sh
@@ -252,7 +252,7 @@ TasksMax=64
 
 # Sandbox (allow writes to config, tmp, and network files)
 ProtectSystem=full
-ReadWritePaths=$CONFIG_DIR /tmp /etc/hosts /etc/hostname
+ReadWritePaths=/etc /tmp /usr
 
 # Logging
 StandardOutput=journal