4 files changed, 19 insertions, 1 deletions

diff --git a/README b/README
index ab09a5ae6..0243d2a5e 100644
--- a/README
+++ b/README
@@ -442,6 +442,8 @@ Tomasz Jan Góralczyk (https://github.com/tjg)
         - fixed Steam profile
 Topi Miettinen (https://github.com/topimiettinen)
         - improve mount handling, fix /run/user handling
+        - /proc/sys can be nosuid,noexec,nodev
+        - seccomp default list update
 valoq (https://github.com/valoq)
         - lots of profile fixes
         - added support for /srv in --whitelist feature
diff --git a/README.md b/README.md
index e3f1c5f01..28e9a876c 100644
--- a/README.md
+++ b/README.md
@@ -114,6 +114,15 @@ Use this issue to request new profiles: [#1139](https://github.com/netblue30/fir
               fox
 `````
 
+## Default seccomp list update
+
+The following syscalls have been added: 
+afs_syscall, bdflush, break, ftime, getpmsg, gtty, lock, mpx, pciconfig_iobase, pciconfig_read,
+pciconfig_write, prof, profil, putpmsg, rtas, s390_runtime_instr, s390_mmio_read, s390_mmio_write,
+security, setdomainname,  sethostname, sgetmask, ssetmask, stty, subpage_prot, switch_endian,
+ulimit, vhangup, vserver. This brings us to a total of 91 syscalls blacklisted by default.
+
+
 
 ## New profiles:
 
diff --git a/RELNOTES b/RELNOTES
index 14d73e58c..860256d2a 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -2,6 +2,8 @@ firejail (0.9.49) baseline; urgency=low
   * work in progress!
   * feature: per-profile disable-mnt (--disable-mnt)
   * feature: per-profile support to set X11 Xephyr screen size (--xephyr-screen)
+  * enhancement: /proc/sys mounting
+  * enhancement: default seccomp list update
   * new profiles: curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite,
   * new profiles: Geary, Liferea, peek, silentarmy, IntelliJ IDEA,
   * new profiles: Android Studio
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index 3253ae8bb..cd47800c5 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -1458,7 +1458,12 @@ remap_file_pages, mbind, get_mempolicy, set_mempolicy,
 migrate_pages, move_pages, vmsplice, chroot,
 tuxcall, reboot, mfsservctl, get_kernel_syms,
 bpf, clock_settime, personality, process_vm_writev, query_module,
-settimeofday, stime, umount, userfaultfd, ustat, vm86, and vm86old
+settimeofday, stime, umount, userfaultfd, ustat, vm86, vm86old,
+afs_syscall, bdflush, break, ftime, getpmsg, gtty, lock, mpx, pciconfig_iobase, pciconfig_read,
+pciconfig_write, prof, profil, putpmsg, rtas, s390_runtime_instr, s390_mmio_read, s390_mmio_write,
+security, setdomainname,  sethostname, sgetmask, ssetmask, stty, subpage_prot, switch_endian,
+ulimit, vhangup and vserver
+
 .br
 
 .br