selinux +prevent-removal
