diff --git a/data/seccomp/anbox.sc b/data/seccomp/anbox.sc
new file mode 100644
index 0000000..8ddea8a
--- /dev/null
+++ b/data/seccomp/anbox.sc
@@ -0,0 +1,7 @@
+reject_force_umount  # comment this to allow umount -f;  not recommended
+[all]
+kexec_load errno 38
+open_by_handle_at errno 38
+init_module errno 38
+finit_module errno 38
+delete_module errno 38