On 1/29/24 22:15, Jan Stary wrote:
> On Jan 29 19:50:40,rbranco@suse.de  wrote:
>> 1. When the user sets those flags, he cannot unset them later when running
>> on Linux, FreeBSD (and perhaps other systems).  Only root.
> On OpenBSD, the user can unset them too.

And _that_ is a problem.  Because you're mapping UF_IMMUTABLE and 
SF_IMMUTABLE to EXT2_IMMUTABLE_FL, if root sets the system immutable 
flag, the user can unset it after the filesystem is mounted again.

If that's not obvious, I rest my case.