diff --git a/src/core/dbus-execute.c b/src/core/dbus-execute.c
index a3e54e6411..59c9352296 100644
--- a/src/core/dbus-execute.c
+++ b/src/core/dbus-execute.c
@@ -375,6 +375,10 @@ static int property_get_syscall_filter(
                 char *s;
                 int num = PTR_TO_INT(val);
 
+                if (c->syscall_allow_list && num >= 0)
+                        /* syscall with num >= 0 in allow-list is denied. */
+                        continue;
+
                 name = seccomp_syscall_resolve_num_arch(SCMP_ARCH_NATIVE, PTR_TO_INT(id) - 1);
                 if (!name)
                         continue;