(In reply to Reinhard Max from comment #4) With an override containing the following, hwtimestamp works: [Service] PrivateDevices=false DeviceAllow=char-ptp Commenting out either line breaks it again, so this seems to be the minimum required change.