diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
index f79ddc23a865..66eba0944ed8 100644
--- a/CHANGELOG.next.asciidoc
+++ b/CHANGELOG.next.asciidoc
@@ -19,6 +19,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff]
 - Fix templates and docs to use correct `--` version of command line arguments. {issue}42038[42038] {pull}42060[42060]
 - removed support for a single `-` to precede multi-letter command line arguments.  Use `--` instead. {issue}42117[42117] {pull}42209[42209]
 - The Beats logger and file output rotate files when necessary. The beat now forces a file rotation when unexpectedly writing to a file through a symbolic link.
+- Allow faccessat(2) in seccomp. {pull}43322[43322]
 
 *Auditbeat*
 
diff --git a/libbeat/common/seccomp/policy_linux_386.go b/libbeat/common/seccomp/policy_linux_386.go
index 243dcc01f180..584c51951d03 100644
--- a/libbeat/common/seccomp/policy_linux_386.go
+++ b/libbeat/common/seccomp/policy_linux_386.go
@@ -49,6 +49,7 @@ func init() {
 					"execve",
 					"exit",
 					"exit_group",
+					"faccessat",
 					"faccessat2",
 					"fchdir",
 					"fchmod",
diff --git a/libbeat/common/seccomp/policy_linux_amd64.go b/libbeat/common/seccomp/policy_linux_amd64.go
index 0458ff6a0458..8f24edbd2a11 100644
--- a/libbeat/common/seccomp/policy_linux_amd64.go
+++ b/libbeat/common/seccomp/policy_linux_amd64.go
@@ -54,6 +54,7 @@ func init() {
 					"execve",
 					"exit",
 					"exit_group",
+					"faccessat",
 					"faccessat2",
 					"fchdir",
 					"fchmod",