diff --git a/conf/debian-jessie b/conf/debian-jessie
index e66b5fe..77a4ef3 100644
--- a/conf/debian-jessie
+++ b/conf/debian-jessie
@@ -13,7 +13,7 @@ lxc.tty = 4
 lxc.pts = 1024
 
 # Default capabilities
-lxc.cap.drop = sys_module mac_admin mac_override sys_time
+lxc.cap.drop = sys_module mac_admin mac_override sys_time sys_rawio
 
 # When using LXC with apparmor, the container will be confined by default.
 # If you wish for it to instead run unconfined, copy the following line