From 156322988617a33ee46ed016e3024b04c7e17d67 Mon Sep 17 00:00:00 2001
From: DepressedTWM <imlazyshit@arch.gay>
Date: Sat, 15 Aug 2026 22:13:51 +0400
Subject: [PATCH] SecurityEngine hardened

---
 src/security.cpp | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/src/security.cpp b/src/security.cpp
index b1f6531..791a53b 100644
--- a/src/security.cpp
+++ b/src/security.cpp
@@ -9,6 +9,7 @@
 	#include <sys/socket.h>
 	#include <seccomp.h>
 	//Yes its not best way, anyway better than nothing.
+	// https://www.man7.org/linux/man-pages/man2/syscalls.2.html
 	scmp_filter_ctx ctx;
 	const int seccomplist[] = {SCMP_SYS(bpf),
 	SCMP_SYS(set_mempolicy),
@@ -60,6 +61,20 @@
 	SCMP_SYS(setfsgid),
 	SCMP_SYS(setdomainname),
 	SCMP_SYS(setns),
+	SCMP_SYS(unshare),
+	
+	#ifdef __ARM_NR
+	SCMP_SYS(breakpoint),
+	#endif
+	
+	#ifdef __powerpc__
+	SCMP_SYS(sys_debug_setcontext),
+	SCMP_SYS(rtas),
+	#endif
+	
+	#ifdef __alpha
+	SCMP_SYS(oldumount),
+	#endif
 	SCMP_SYS(setpgid),
 	SCMP_SYS(pciconfig_write)};
 #endif