Disable executable memory mappings in SELinux (setsebool)
setsebool -P allow_execheap 0
Disables the SELinux allow_execheap boolean, allowing processes to execute code in writable memory regions. This is necessary for some applications, like Steam games, to function correctly, but it reduces overall system security.