diff --git a/interfaces/builtin/docker_support.go b/interfaces/builtin/docker_support.go
index 349c2f21bb1..481ae35a7e4 100644
--- a/interfaces/builtin/docker_support.go
+++ b/interfaces/builtin/docker_support.go
@@ -157,6 +157,7 @@ ptrace (read, trace) peer=docker-default,
 # needed by runc for mitigation of CVE-2019-5736
 # For details see https://bugs.launchpad.net/apparmor/+bug/1820344
 / ix,
+/bin/runc rix,
 `
 
 const dockerSupportConnectedPlugSecComp = `