diff --git a/distrobuilder/lxc.generator b/distrobuilder/lxc.generator
index f7692afc..ad4a2eba 100644
--- a/distrobuilder/lxc.generator
+++ b/distrobuilder/lxc.generator
@@ -106,7 +106,7 @@ fix_systemd_override_unit() {
 			echo "PrivateTmp=no";
 			[ "${SYSTEMD}" -ge 244 ] && echo "ProtectKernelLogs=no";
 			[ "${SYSTEMD}" -ge 232 ] && echo "ProtectKernelModules=no";
-			[ "${SYSTEMD}" -ge 231 ] && echo "ReadWritePaths=";
+			[ "${SYSTEMD}" -ge 231 ] && echo "ReadWritePaths=" && echo "ReadOnlyPaths=";
 			[ "${SYSTEMD}" -ge 254 ] && [ "${SYSTEMD}" -lt 256 ] && echo "ImportCredential=";
 		fi