From b5f45aa03df0007844773b37e3dccbbe3bc4b2b5 Mon Sep 17 00:00:00 2001
From: JamesClonk <jamesclonk@jamesclonk.ch>
Date: Thu, 30 Jul 2026 10:40:29 +0200
Subject: [PATCH] Add preadv2 and pwritev2 to seccomp allowlist

Signed-off-by: Fabio Berchtold <fabio.berchtold@swisscom.com>
---
 guardiancmd/seccomp_linux.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/guardiancmd/seccomp_linux.go b/guardiancmd/seccomp_linux.go
index 3fc48ebb7..ff6afae23 100644
--- a/guardiancmd/seccomp_linux.go
+++ b/guardiancmd/seccomp_linux.go
@@ -216,10 +216,12 @@ func buildSeccomp() (*specs.LinuxSeccomp, error) {
 			AllowSyscall("prctl"),
 			AllowSyscall("pread64"),
 			AllowSyscall("preadv"),
+			AllowSyscall("preadv2"),
 			AllowSyscall("prlimit64"),
 			AllowSyscall("pselect6"),
 			AllowSyscall("pwrite64"),
 			AllowSyscall("pwritev"),
+			AllowSyscall("pwritev2"),
 			AllowSyscall("read"),
 			AllowSyscall("readahead"),
 			AllowSyscall("readlink"),