diff --git a/bpfloader/bpfloader.rc b/bpfloader/bpfloader.rc
index 3c56c43..53219f4 100644
--- a/bpfloader/bpfloader.rc
+++ b/bpfloader/bpfloader.rc
@@ -15,6 +15,9 @@
 # considered to have booted successfully.
 #
 on load_bpf_programs
+    # Linux 5.16-rc1 has changed the default to 2 (disabled but changeable),
+    # but we need 0
+    write /proc/sys/kernel/unprivileged_bpf_disabled 0
     # Enable the eBPF JIT -- but do note that on 64-bit kernels it is likely
     # already force enabled by the kernel config option BPF_JIT_ALWAYS_ON
     write /proc/sys/net/core/bpf_jit_enable 1