diff --git a/install.sh b/install.sh
index 4124fbe..1660b81 100644
--- a/install.sh
+++ b/install.sh
@@ -250,9 +250,7 @@ MemoryMax=256M
 CPUQuota=50%
 TasksMax=64
 
-# Sandbox (allow writes to config, tmp, and network files)
-ProtectSystem=full
-ReadWritePaths=/etc /tmp /usr
+# Sandbox disabled: clawd needs to write system/config files on some devices
 
 # Logging
 StandardOutput=journal
diff --git a/package-lock.json b/package-lock.json
index 294862b..0b4afbb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "clawd",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "clawd",
-      "version": "1.5.0",
+      "version": "1.5.1",
       "license": "MIT",
       "dependencies": {
         "ssh2": "^1.17.0",
diff --git a/package.json b/package.json
index 2a87fc9..8a7de6d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "clawd",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "description": "Claw Box daemon - connects local Linux box to claw.cutos.ai via WebSocket",
   "main": "lib/client.js",
   "bin": {