diff --git a/lib/systemd/system/hide-hardware-info.service b/lib/systemd/system/hide-hardware-info.service
index f411a56..8720c98 100644
--- a/lib/systemd/system/hide-hardware-info.service
+++ b/lib/systemd/system/hide-hardware-info.service
@@ -12,6 +12,7 @@ After=local-fs.target
 [Service]
 Type=oneshot
 ExecStart=/usr/lib/security-misc/hide-hardware-info
+RemainAfterExit=yes
 
 [Install]
 WantedBy=sysinit.target
diff --git a/lib/systemd/system/permission-hardening.service b/lib/systemd/system/permission-hardening.service
index 62680f1..607e542 100644
--- a/lib/systemd/system/permission-hardening.service
+++ b/lib/systemd/system/permission-hardening.service
@@ -14,6 +14,7 @@ After=local-fs.target
 Type=oneshot
 RemainAfterExit=yes
 ExecStart=/usr/lib/security-misc/permission-hardening
+RemainAfterExit=yes
 
 [Install]
 WantedBy=sysinit.target
diff --git a/lib/systemd/system/proc-hidepid.service b/lib/systemd/system/proc-hidepid.service
index 470e4bc..3952c86 100644
--- a/lib/systemd/system/proc-hidepid.service
+++ b/lib/systemd/system/proc-hidepid.service
@@ -12,6 +12,7 @@ After=local-fs.target
 [Service]
 Type=oneshot
 ExecStart=/bin/mount -o remount,nosuid,nodev,noexec,hidepid=2 /proc
+RemainAfterExit=yes
 
 [Install]
 WantedBy=sysinit.target
diff --git a/lib/systemd/system/remount-secure.service b/lib/systemd/system/remount-secure.service
index 8540376..83a60ad 100644
--- a/lib/systemd/system/remount-secure.service
+++ b/lib/systemd/system/remount-secure.service
@@ -16,6 +16,7 @@ After=qubes-sysinit.service
 Type=oneshot
 RemainAfterExit=yes
 ExecStart=/usr/lib/security-misc/remount-secure
+RemainAfterExit=yes
 
 [Install]
 WantedBy=sysinit.target
diff --git a/lib/systemd/system/remove-system-map.service b/lib/systemd/system/remove-system-map.service
index 1ccdd4e..3d0f44c 100644
--- a/lib/systemd/system/remove-system-map.service
+++ b/lib/systemd/system/remove-system-map.service
@@ -12,6 +12,7 @@ After=local-fs.target
 [Service]
 Type=oneshot
 ExecStart=/usr/lib/security-misc/remove-system.map
+RemainAfterExit=yes
 
 [Install]
 WantedBy=sysinit.target