1 files changed, 4 insertions, 0 deletions

diff --git a/src/lib/syscall.c b/src/lib/syscall.c
index 4903971ad..758f1ce0b 100644
--- a/src/lib/syscall.c
+++ b/src/lib/syscall.c
@@ -336,6 +336,7 @@ static const SyscallGroupList sysgroups[] = {
 #endif
         },
         { .name = "@default-keep", .list =
+          "execveat," // commonly used by fexecve
           "execve,"
           "prctl"
         },
@@ -358,6 +359,9 @@ static const SyscallGroupList sysgroups[] = {
 #ifdef SYS_faccessat
           "faccessat,"
 #endif
+#ifdef SYS_faccessat2
+          "faccessat2,"
+#endif
 #ifdef SYS_fallocate
           "fallocate,"
 #endif