According to https://unix.stackexchange.com/questions/478533/why-are-program-images-and-shared-libraries-considered-private-to-a-process 11, the Private pages is copy-on-write, if it is only readable, it still can be shared by the kernel in physical memory. But the anon part is still a issue, because now it is Dirty.