I don't think a shadow on the whole would be a good idea -- if the fsck modifies the directories/metadata under us, we'll crash. We can get away with it for executables because (1) they're never launched during fsck activity, and they're mmap'd to specific disk blocks (I think), so once running there's no more access to the directory/metadata to page them in/out.

Cheers