http://netbsd.i2p/docs/guide/en/chap-veriexec.html
Strict level 2 , IPS mode,
takes a step towards trying to protect the integrity of
monitored files. In addition to preventing access to files with
a fingerprint mismatch, it will also deny write access and
prevent the removal of monitored files, and enforce the way
monitored files are accessed.