On Fri, 5 Oct 2018 12:27:27 -0700 "Joel Fernandes (Google)" <joel@xxxxxxxxxxxxxxxxx> wrote: > To support the usecase, this patch adds a new F_SEAL_FS_WRITE seal which > prevents any future mmap and write syscalls from succeeding while > keeping the existing mmap active. The following program shows the seal > working in action: Please be prepared to create a manpage patch for this one.