1 files changed, 1 insertions, 0 deletions

diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index 2831e9d10..200932a8c 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -225,6 +225,7 @@ static const struct sock_filter preauth_insns[] = {
 #endif
 #ifdef __NR_socketcall
         SC_ALLOW_ARG(__NR_socketcall, 0, SYS_SHUTDOWN),
+        SC_DENY(__NR_ssocketcall, EACCES),
 #endif
 #if defined(__NR_ioctl) && defined(__s390__)
         /* Allow ioctls for ICA crypto card on s390 */