The new system call #mseal()[1] after multiple revisions and various discussions[2] finally made it to #linux-next and thus is slated to appear in #LinuxKernel 6.10:
https://lore.kernel.org/all/20240415163527.626541-1-jeffxu@chromium.org/T/#u
[1] "In a nutshell, mseal() protects the VMAs of a given virtual memory range against modifications, such as changes to their permission bits."
*BSD? yeah, see the linked lwn article for details; initially it was supposed to work slightly different, but Linus had concerns.
and ntsync: seems many people are really excited about it.
Would be kinda funny if lots of native Linux apps over time to start relying on a technique with "nt" in the name 😄