The new system call #mseal()[1] after multiple revisions and various discussions[2] finally made it to #linux-next and thus is slated to appear in #LinuxKernel 6.10:

https://lore.kernel.org/all/2024041516[email protected]/T/#u

[1] "In a nutshell, mseal() protects the VMAs of a given virtual memory range against modifications, such as changes to their permission bits."

[2] https://lwn.net/Articles/948129/

[PATCH v10 0/5] Introduce mseal

@kernellogger hmm... is this inspired *BSD? have a faint memory that it had something similar but could remember wrong. nice addition anyway although personally ntsync driver is the thing for me in the next release :-)

@jarkko

*BSD? yeah, see the linked lwn article for details; initially it was supposed to work slightly different, but Linus had concerns.