diff --git a/src/iwd.service.in b/src/iwd.service.in
index a765d387..9bf48245 100644
--- a/src/iwd.service.in
+++ b/src/iwd.service.in
@@ -11,7 +11,8 @@ LimitNPROC=1
 Restart=on-failure
 PrivateTmp=true
 NoNewPrivileges=true
-PrivateDevices=true
+DevicePolicy=closed
+DeviceAllow=/dev/rfkill rw
 ProtectHome=yes
 ProtectSystem=strict
 ReadWritePaths=/var/lib/iwd/