Jump to content

Command Crate ¿about?

Disable executable memory mappings for SELinux users (setsebool)

setsebool -P selinuxuser_execheap 0

Disables the SELinux selinuxuser_execheap boolean, allowing user processes to execute code in writable memory regions. This is necessary for some applications, like Steam games, to function correctly, but it reduces overall system security.

security [kb:134]