diff --git a/listmonk@.service b/listmonk@.service
index d6a8f0f4..880b1c95 100644
--- a/listmonk@.service
+++ b/listmonk@.service
@@ -66,7 +66,7 @@ ProtectKernelTunables=True
 ProtectHome=True
 
 # listmonk doesn’t handle any specific device nodes.
-DeviceAllow=False
+DevicePolicy=closed
 # listmonk doesn’t make use of linux namespaces.
 RestrictNamespaces=True
 # listmonk doesn’t need realtime scheduling.