1 files changed, 1 insertions, 0 deletions

diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index 3833424bf..98062f152 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -243,6 +243,7 @@ static const struct sock_filter preauth_insns[] = {
 #endif
 #ifdef __NR_socketcall
         SC_ALLOW_ARG(__NR_socketcall, 0, SYS_SHUTDOWN),
+        SC_DENY(__NR_socketcall, EACCES),
 #endif
 #if defined(__NR_ioctl) && defined(__s390__)
         /* Allow ioctls for ICA crypto card on s390 */