diff --git a/main/seccomp.c b/main/seccomp.c
index 3003285ca4..4b8981ecf0 100644
--- a/main/seccomp.c
+++ b/main/seccomp.c
@@ -27,6 +27,7 @@ int installSyscallFilter (void)
 
 	// Memory allocation.
 	seccomp_rule_add (ctx, SCMP_ACT_ALLOW, SCMP_SYS (mmap), 0);
+	seccomp_rule_add (ctx, SCMP_ACT_ALLOW, SCMP_SYS (munmap), 0);
 	seccomp_rule_add (ctx, SCMP_ACT_ALLOW, SCMP_SYS (brk), 0);
 
 	// I/O