Yes, in fact in his comments Theo de Raadt specifically says (amongst other things): > experience with mimmutable() says that applications don't do any of it t

Yes, in fact in his comments Theo de Raadt specifically says (amongst other things): > experience with mimmutable() says that applications don't do any of it themselves, it is all in execve(), libc initialization, and ld.so. So this is almost never something a process does to itself, it is part of the sandboxing of child processes.