2026-07-12 14:45:23 +00:00
1 changed files with 4 additions and 1 deletions
@@ -30,7 +30,10 @@ ProtectSystem=strict
 ProtectHome=read-only
 # The blob-store root + hot/warm dirs are the only writable paths.
 # Adjust via drop-in when your dirs live outside `%h/clawstor-deploy`.
-ReadWritePaths=%h/clawstor-deploy
+# v1 daemon still writes projects.toml + related state under XDG.
+# %h/.local/state/claw-store is created on first run; the systemd
+# unit needs to whitelist it under ProtectHome=read-only.
+ReadWritePaths=%h/clawstor-deploy %h/.local/state/claw-store
 PrivateTmp=yes

 [Install]