I wonder if we can completely disallow mmap'ing block devices? I suspect it has never worked nor needed by anyone - otherwise why such a serious problem has been open for a long time!