diff --git a/services/ddm.service.in b/services/ddm.service.in
index 06e4c8c..e48b29a 100644
--- a/services/ddm.service.in
+++ b/services/ddm.service.in
@@ -14,7 +14,7 @@ Before=seatd.service
 ExecStart=@CMAKE_INSTALL_FULL_BINDIR@/ddm
 Restart=always
 
-CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_KILL CAP_SETGID CAP_SETUID CAP_SYS_ADMIN CAP_SYS_BOOT CAP_SYS_CHROOT CAP_SYS_TTY_CONFIG
+CapabilityBoundingSet=CAP_CHOWN CAP_DAC_OVERRIDE CAP_DAC_READ_SEARCH CAP_FOWNER CAP_KILL CAP_SETGID CAP_SETUID CAP_SYS_ADMIN CAP_SYS_BOOT CAP_SYS_CHROOT CAP_SYS_TTY_CONFIG
 OOMScoreAdjust=-300
 Nice=-15
 PrivateIPC=true