diff --git a/pkg/sentry/kernel/seccomp.go b/pkg/sentry/kernel/seccomp.go index 515678e1c..b698e543f 100644 --- a/pkg/sentry/kernel/seccomp.go +++ b/pkg/sentry/kernel/seccomp.go @@ -297,7 +297,9 @@ func (t *Task) AppendSyscallFilter(p bpf.Program, syncAll bool) error { // Note: No new privs is always assumed to be set. for ot := t.tg.tasks.Front(); ot != nil; ot = ot.Next() { if ot != t { - ot.seccomp.Store(newSeccomp.copy()) + seccompCopy := newSeccomp.copy() + seccompCopy.populateCache(ot) + ot.seccomp.Store(seccompCopy) } } }