On Mon, Jul 31, 2023 at 10:26 AM Stephen Smalley <stephen.smalley.work@xxxxxxxxx> wrote: > I believe this patch yields a semantic change in the SELinux execheap > permission check. That said, I think the change is for the better. Agreed. I'm also in favor of using a helper which is maintained by the VM folks over open coded logic in the SELinux code. -- paul-moore.com