diff --git a/oci/spec_unix.go b/oci/spec_unix.go
index f791c357f..f8d8524dd 100644
--- a/oci/spec_unix.go
+++ b/oci/spec_unix.go
@@ -153,7 +153,9 @@ func createDefaultSpec(ctx context.Context, id string) (*Spec, error) {
 		},
 		Linux: &specs.Linux{
 			MaskedPaths: []string{
+				"/proc/acpi",
 				"/proc/kcore",
+				"/proc/keys",
 				"/proc/latency_stats",
 				"/proc/timer_list",
 				"/proc/timer_stats",