diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml
index 3cef36d3c3..b534454396 100644
--- a/man/systemd.exec.xml
+++ b/man/systemd.exec.xml
@@ -1842,6 +1842,100 @@ BindReadOnlyPaths=/var/lib/systemd
logging.
+
+ RestrictFileSystems=
+
+ Restricts the set of filesystems processes of this unit can open files on. Takes a space-separated
+ list of filesystem names. Any filesystem listed is made accessible to the unit's processes, access to filesystem
+ types not listed is prohibited (allow-listing). If the first character of the list is ~, the
+ effect is inverted: access to the filesystems listed is prohibited (deny-listing). If the empty string is assigned,
+ access to filesystems is not restricted.
+
+ If you specify both types of this option (i.e. allow-listing and deny-listing), the first encountered will take
+ precedence and will dictate the default action (allow access to the filesystem or deny it). Then the next occurrences
+ of this option will add or delete the listed filesystems from the set of the restricted filesystems, depending on its
+ type and the default action.
+
+ Example: if a unit has the following,
+ RestrictFileSystems=ext4 tmpfs
+RestrictFileSystems=ext2 ext4
+ then access to ext4, tmpfs, and ext2 is allowed
+ and access to other filesystems is denied.
+
+ Example: if a unit has the following,
+ RestrictFileSystems=ext4 tmpfs
+RestrictFileSystems=~ext4
+ then only access tmpfs is allowed.
+
+ Example: if a unit has the following,
+ RestrictFileSystems=~ext4 tmpfs
+RestrictFileSystems=ext4
+ then only access to tmpfs is denied.
+
+ As the number of possible filesystems is large, predefined sets of filesystems are provided. A set
+ starts with @ character, followed by name of the set.
+
+
+ Currently predefined filesystem sets
+
+
+
+
+
+
+ Set
+ Description
+
+
+
+
+ @basic-api
+ Basic filesystem API.
+
+
+ @auxiliary-api
+ Auxiliary filesystem API.
+
+
+ @common-block
+ Common block device filesystems.
+
+
+ @historical-block
+ Historical block device filesystems.
+
+
+ @network
+ Well-known network filesystems.
+
+
+ @privileged-api
+ Privileged filesystem API.
+
+
+ @temporary
+ Temporary filesystems: tmpfs, ramfs.
+
+
+ @known
+ All known filesystems defined by the kernel. This list is defined statically in systemd based on a kernel
+ version that was available when this systemd version was released. It will become progressively more
+ out-of-date as the kernel is updated.
+
+
+
+
+
+ Use
+ systemd-analyze1's
+ filesystems command to retrieve a list of filesystems defined on the local
+ system.
+
+ Note that this setting might not be supported on some systems (for example if the LSM eBPF hook is
+ not enabled in the underlying kernel or if not using the unified control group hierarchy). In that case this setting
+ has no effect.
+
+
RestrictNamespaces=