Hi, I would like to report the call to memfd_create in `src/libbpf.c` does not specify MFD_NOEXEC_SEAL on newer kernels that allow this feature, which is used to prevent code execution on the memory area. It only specifies MFD_CLOEXEC. This is reflected in the kernel logs: [ 4.853311] systemd[1]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set There is a similar patch in wayland for checking and versioning this flag: https://gitlab.freedesktop.org/wayland/wayland/-/merge_requests/343/ Thanks! btdmaster
