On Tue, 12 Dec 2023 at 15:17, <jeffxu@xxxxxxxxxxxx> wrote: > + > +**types**: bit mask to specify the sealing types, they are: I really want a real-life use-case for more than one bit of "don't modify". IOW, when would you *ever* say "seal this area, but MADV_DONTNEED is ok"? Or when would you *ever* say "seal this area, but mprotect()" is ok. IOW, I want to know why we don't just do the BSD immutable thing, and why we need this multi-level sealing thing. Linus