diff --git a/data/fprintd.service.in b/data/fprintd.service.in
index 150e58a..24d7f5d 100644
--- a/data/fprintd.service.in
+++ b/data/fprintd.service.in
@@ -26,3 +26,6 @@ ProtectKernelModules=true
 
 # Real-time
 RestrictRealtime=true
+
+# Privilege escalation
+NoNewPrivileges=true