memfd_add_seals
int memfd_add_seals(struct file *file, unsigned int seals);
error = memfd_add_seals(file, arg);
err = memfd_add_seals(file, ser->seals);