diff --git a/units/systemd-sysupdate-update.service.in b/units/systemd-sysupdate-update.service.in
index 894d17034c..74adb61fda 100644
--- a/units/systemd-sysupdate-update.service.in
+++ b/units/systemd-sysupdate-update.service.in
@@ -25,7 +25,7 @@ NoNewPrivileges=yes
 MemoryDenyWriteExecute=yes
 ProtectHostname=yes
 RestrictRealtime=yes
-RestrictNamespaces=net
+RestrictNamespaces=net mnt
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
 SystemCallFilter=@system-service @mount
 SystemCallErrorNumber=EPERM
diff --git a/units/systemd-sysupdate@.service.in b/units/systemd-sysupdate@.service.in
index c54d469597..09b1d16c9a 100644
--- a/units/systemd-sysupdate@.service.in
+++ b/units/systemd-sysupdate@.service.in
@@ -23,7 +23,7 @@ NoNewPrivileges=yes
 MemoryDenyWriteExecute=yes
 ProtectHostname=yes
 RestrictRealtime=yes
-RestrictNamespaces=net
+RestrictNamespaces=net mnt
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
 SystemCallFilter=@system-service @mount
 SystemCallErrorNumber=EPERM