diff --git a/contrib/unbound.service.in b/contrib/unbound.service.in
index d0e294213..b1211a4be 100644
--- a/contrib/unbound.service.in
+++ b/contrib/unbound.service.in
@@ -65,6 +65,7 @@ ProtectKernelModules=true
 ProtectSystem=strict
 RuntimeDirectory=unbound
 ConfigurationDirectory=unbound
+StateDirectory=unbound
 RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
 RestrictRealtime=true
 SystemCallArchitectures=native
diff --git a/contrib/unbound_portable.service.in b/contrib/unbound_portable.service.in
index 53dc8701b..cbfc58f99 100644
--- a/contrib/unbound_portable.service.in
+++ b/contrib/unbound_portable.service.in
@@ -39,6 +39,7 @@ ProtectKernelModules=true
 ProtectSystem=strict
 RuntimeDirectory=unbound
 ConfigurationDirectory=unbound
+StateDirectory=unbound
 RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
 RestrictRealtime=true
 SystemCallArchitectures=native