Blocking the timeupdate in ffs_sbupdate() will be difficult. It is probably easier to have the BOOT kernel learn the time (from the true root filesystem), so that ffs_sbupdate() writes back the same value.
That means either an ugly way to reach inittodr() or the userland code in the bootblock could read the superblock and settimeofday(). But it might slide a bit..
