Index: head/sys/compat/linux/linux_misc.h
===================================================================
--- head/sys/compat/linux/linux_misc.h
+++ head/sys/compat/linux/linux_misc.h
@@ -50,12 +50,15 @@
 					 * Second arg is a ptr to return the
 					 * signal.
 					 */
+#define	LINUX_PR_SET_DUMPABLE	4
 #define	LINUX_PR_GET_KEEPCAPS	7	/* Get drop capabilities on setuid */
 #define	LINUX_PR_SET_KEEPCAPS	8	/* Set drop capabilities on setuid */
 #define	LINUX_PR_SET_NAME	15	/* Set process name. */
 #define	LINUX_PR_GET_NAME	16	/* Get process name. */
 #define	LINUX_PR_GET_SECCOMP	21
 #define	LINUX_PR_SET_SECCOMP	22
+#define	LINUX_PR_SET_NO_NEW_PRIVS	38
+#define	LINUX_PR_SET_PTRACER	1499557217
 
 #define	LINUX_MAX_COMM_LEN	16	/* Maximum length of the process name. */
 
Index: head/sys/compat/linux/linux_misc.c
===================================================================
--- head/sys/compat/linux/linux_misc.c
+++ head/sys/compat/linux/linux_misc.c
@@ -1949,6 +1949,10 @@
 		    (void *)(register_t)args->arg2,
 		    sizeof(pdeath_signal)));
 		break;
+	case LINUX_PR_SET_DUMPABLE:
+		linux_msg(td, "unsupported prctl PR_SET_DUMPABLE");
+		error = EINVAL;
+		break;
 	case LINUX_PR_GET_KEEPCAPS:
 		/*
 		 * Indicate that we always clear the effective and
@@ -2006,6 +2010,14 @@
 		/*
 		 * Same as returned by Linux without CONFIG_SECCOMP enabled.
 		 */
+		error = EINVAL;
+		break;
+	case LINUX_PR_SET_NO_NEW_PRIVS:
+		linux_msg(td, "unsupported prctl PR_SET_NO_NEW_PRIVS");
+		error = EINVAL;
+		break;
+	case LINUX_PR_SET_PTRACER:
+		linux_msg(td, "unsupported prctl PR_SET_PTRACER");
 		error = EINVAL;
 		break;
 	default: