Paths that remain writable when filesystem protection is enabled. This writes ReadWritePaths=.

Enter space-separated absolute paths, such as /var/lib/myapp /var/log/myapp. This is typically used with ProtectSystem=full or ProtectSystem=strict.

Advanced systemd path prefixes such as - for optional paths are accepted when needed.

For user units, these should be paths the selected user can access, typically below that user's home directory. They cannot make system directories writable to the user.