diff --git a/install-dev.sh b/install-dev.sh
index f3597be..428e5f1 100755
--- a/install-dev.sh
+++ b/install-dev.sh
@@ -815,7 +815,9 @@ StandardError=journal
 SyslogIdentifier=ripster-backend
 
 # Sicherheit
-NoNewPrivileges=true
+# Für Skriptausführung via GUI (inkl. optionalem sudo in User-Skripten)
+# darf no_new_privileges nicht aktiv sein.
+NoNewPrivileges=false
 ProtectSystem=full
 ProtectHome=read-only
 ReadWritePaths=${INSTALL_DIR}/backend/data ${INSTALL_DIR}/backend/logs /tmp
diff --git a/install.sh b/install.sh
index 0885ddd..1436544 100755
--- a/install.sh
+++ b/install.sh
@@ -561,7 +561,9 @@ SyslogIdentifier=ripster-backend
 DevicePolicy=auto
 SupplementaryGroups=video render cdrom disk
 
-NoNewPrivileges=true
+# Für Skriptausführung via GUI (inkl. optionalem sudo in User-Skripten)
+# darf no_new_privileges nicht aktiv sein.
+NoNewPrivileges=false
 ProtectSystem=full
 ProtectHome=read-only
 ReadWritePaths=${INSTALL_DIR}/backend/data ${INSTALL_DIR}/backend/logs /tmp