Andy Smith wrote: ...
>Though note that it seems systemd once did use "noexec" for /dev/shm >but stopped 10 years ago because it broke some uses of mmap: > > > https://github.com/systemd/systemd/commit/501c875bffaef3263ad42c32485c7fde41027175 libffi also has a habit of using /dev/shm for writing temporary trampolines for cross-language calls, and they need to be executable. -- Steve McIntyre, Cambridge, UK. st...@einval.com "You can't barbecue lettuce!" -- Ellie Crane
