diff --git a/stable/falco/CHANGELOG.md b/stable/falco/CHANGELOG.md
index 52b192f367..8007d2efcd 100644
--- a/stable/falco/CHANGELOG.md
+++ b/stable/falco/CHANGELOG.md
@@ -3,6 +3,12 @@
 This file documents all notable changes to Sysdig Falco Helm Chart. The release
 numbering uses [semantic versioning](http://semver.org).
 
+## v1.0.9
+
+### Minor Changes
+
+* Restrict the access to `/dev` on underlying host to read only
+
 ## v1.0.8
 
 ### Minor Changes
diff --git a/stable/falco/Chart.yaml b/stable/falco/Chart.yaml
index 8b09c77203..ee38cc563b 100644
--- a/stable/falco/Chart.yaml
+++ b/stable/falco/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 name: falco
-version: 1.0.8
+version: 1.0.9
 appVersion: 0.17.1
 description: Falco
 keywords:
diff --git a/stable/falco/templates/daemonset.yaml b/stable/falco/templates/daemonset.yaml
index 8f40c60409..bfe22e948a 100644
--- a/stable/falco/templates/daemonset.yaml
+++ b/stable/falco/templates/daemonset.yaml
@@ -90,6 +90,7 @@ spec:
             {{- end}}
             - mountPath: /host/dev
               name: dev-fs
+              readOnly: true
             - mountPath: /host/proc
               name: proc-fs
               readOnly: true