The detail is that mprotect also lets you add the writable flag back. With mseal...

winternewt 4 months ago | parent | context | favorite | on: Memory sealing for the GNU C Library

The detail is that mprotect also lets you add the writable flag back. With mseal the kernel will refuse future changes to the protection flags.