diff --git a/pw.cloudef.bemenu-run.yml b/pw.cloudef.bemenu-run.yml
index 80e2d54..276a8cd 100644
--- a/pw.cloudef.bemenu-run.yml
+++ b/pw.cloudef.bemenu-run.yml
@@ -16,3 +16,4 @@ finish-args:
   - --share=ipc
   - --socket=x11
   - --socket=wayland
+  - --filesystem=host:ro