Disable executable memory mappings for SELinux users (setsebool)
setsebool -P selinuxuser_execheap 0
Disables the SELinux selinuxuser_execheap boolean, allowing user processes to execute code in writable memory regions. This is necessary for some applications, like Steam games, to function correctly, but it reduces overall system security.