diff --git a/lib/systemd/system/permission-hardening.service b/lib/systemd/system/permission-hardening.service
new file mode 100644
index 0000000..216da23
--- /dev/null
+++ b/lib/systemd/system/permission-hardening.service
@@ -0,0 +1,14 @@
+[Unit]
+Description=File permission hardening
+Documentation=https://github.com/Whonix/security-misc
+DefaultDependencies=no
+Before=sysinit.target
+Requires=local-fs.target
+After=local-fs.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/lib/security-misc/permission-hardening
+
+[Install]
+WantedBy=sysinit.target