diff --git a/interfaces/seccomp/template.go b/interfaces/seccomp/template.go
index a2301c5b928..95748711948 100644
--- a/interfaces/seccomp/template.go
+++ b/interfaces/seccomp/template.go
@@ -108,6 +108,10 @@ close
 # needed by ls -l
 connect
 
+# the file descriptors used here will already be mediated by apparmor,
+# the 6th argument is flags, which currently is always 0
+copy_file_range - - - - - 0
+
 chroot
 
 creat