diff --git a/gost.service b/gost.service
index c029b15..fa550b4 100644
--- a/gost.service
+++ b/gost.service
@@ -34,6 +34,7 @@ MemoryDenyWriteExecute=yes
 NoNewPrivileges=yes
 
 SystemCallFilter=~@privileged @mount @debug @cpu-emulation @obsolete
+SystemCallFilter=@chown
 SystemCallErrorNumber=EPERM
 SystemCallArchitectures=native
 RestrictNamespaces=yes