READ_SEARCH ; • set inode flags (see FS_IOC_SETFLAGS (2const)) on arbitrary files; • set Access ... FS_IMMUTABLE_FL inode flags (see FS_IOC_SETFLAGS (2const)). CAP_MAC_ADMIN (since…getxattr (2), FS_IOC_GETFLAGS (2const), FS_IOC_SETFLAGS (2const), listxattr (2), removexattr (2), setxattr