The mprotect system call changes the specified pages to have protection prot. Not all implementations will guarantee protection on a page basis; the granularity of protection changes may be as large as an entire region. A region is the virtual address space defined by the start and end addresses of a
.Vt "struct vm_map_entry" .
Currently these protection bits are known, which can be combined, ORd together: