Jump to content

Command Crate ¿about?

Disable executable memory mappings in SELinux (setsebool)

setsebool -P allow_execheap 0

Disables the SELinux allow_execheap boolean, allowing processes to execute code in writable memory regions. This is necessary for some applications, like Steam games, to function correctly, but it reduces overall system security.

security [kb:133]