diff --git a/src/sandbox/seccomp.cpp b/src/sandbox/seccomp.cpp
index c179907..a4cbc8c 100644
--- a/src/sandbox/seccomp.cpp
+++ b/src/sandbox/seccomp.cpp
@@ -157,6 +157,7 @@ static sock_filter filter[] = {
     ALLOW_SYSCALL(stat),
 #endif
     ALLOW_SYSCALL(fstat),
+    ALLOW_SYSCALL(newfstatat),
     ALLOW_SYSCALL(fsync), // maybe
 #if __NR_creat
     ALLOW_SYSCALL(creat), // maybe; for DB journal