Hi Yuri,

<snip>

> [Service]
> ReadWritePaths=/etc/resolv.conf.bak
> ReadWritePaths=/etc/resolv.conf
> 
> Others suggested another way to fix it:
> 
> RuntimeDirectory=resolvconf
> ReadWritePaths=/etc/resolv.conf
> 
> https://bugs.archlinux.org/task/67069
> 
> Can src/iwd.service.in be adjusted?

I think this or a similar issue has come up before.  The problem is that iwd 
supports either systemd-resolved or resolvconf.  So for systems that use 
systemd-resolved (which iwd defaults to), punching this security policy 
exception is not needed and arguably it should not be enabled by default.

Perhaps as a compromise we may be able to ship service.in with these lines added 
& commented out.  Not sure if this would be of any help though.  Other ideas are 
welcome.

Regards,
-Denis