mirror of
https://github.com/aphrody-labs/apk-tools.git
synced 2026-10-13 21:26:48 +00:00
- check sysctl vm.memfd_noexec to disable memfd if noexec is enforced (prevents unwanted kernel logging) - add F_SEAL_EXEC seal which may be needed to get W^X behavior - remove the fallback to memfd without MFD_EXEC to explicitly request executable memfd. This makes memfd not work on older kernels without MFD_EXEC, but that should not be a problem.