diff --git a/agent/src/firecracker/rootfs.rs b/agent/src/firecracker/rootfs.rs
index 2b6fd48b..149269ff 100644
--- a/agent/src/firecracker/rootfs.rs
+++ b/agent/src/firecracker/rootfs.rs
@@ -286,16 +286,16 @@ fn build_runtime_spec(config: &oci_client::config::Config) -> Result<Spec> {
         .build()
         .context("Failed to build runtime capabilities spec")?;
 
-    let process = ProcessBuilder::default()
+    let mut process = ProcessBuilder::default()
         .terminal(false)
         .user(user)
         .args(argv)
         .env(env)
         .cwd(cwd)
         .capabilities(capabilities)
-        .no_new_privileges(true)
         .build()
         .context("Failed to build runtime process spec")?;
+    process.set_no_new_privileges(None);
 
     let root = RootBuilder::default()
         .path(CONTAINER_ROOTFS_DIR)
diff --git a/agent/src/firecracker/runtime.rs b/agent/src/firecracker/runtime.rs
index 0ec46515..10e61ad3 100644
--- a/agent/src/firecracker/runtime.rs
+++ b/agent/src/firecracker/runtime.rs
@@ -816,6 +816,7 @@ async fn spawn_jailer(
             "--",
             "--api-sock",
             api_socket,
+            "--no-seccomp",
         ])
         .status()
         .await