diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json index 80213ddaca..73ad2d6418 100644 --- a/profiles/seccomp/default.json +++ b/profiles/seccomp/default.json @@ -183,6 +183,9 @@ "io_uring_setup", "ipc", "kill", + "landlock_add_rule", + "landlock_create_ruleset", + "landlock_restrict_self", "lchown", "lchown32", "lgetxattr", diff --git a/profiles/seccomp/default_linux.go b/profiles/seccomp/default_linux.go index 7c06e728b7..fbd725758b 100644 --- a/profiles/seccomp/default_linux.go +++ b/profiles/seccomp/default_linux.go @@ -175,6 +175,9 @@ func DefaultProfile() *Seccomp { "io_uring_setup", "ipc", "kill", + "landlock_add_rule", + "landlock_create_ruleset", + "landlock_restrict_self", "lchown", "lchown32", "lgetxattr",