I'm considering writing my own seccomp profiles for programs like Pidgin and XChat. Xchat doesn't update anymore so I don't really lose anything by recompiling it. Pidgin might be a pain. Xchat needs virtually no file system access so the apparmor profile is very strong. But... I do love that seccomp sandbox lol and it doesn't get patches. Where do you feel it's lacking?