Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=808350
--- Comment #16 from Jerry James loganjerry@gmail.com --- If the mprotect() calls cannot be folded into mmap() calls, then an alternative is to talk to the SELinux people about writing policy for racket that allows it to call mprotect() with PROT_EXEC. I had to do that for the gcl package. Gcl allocates blocks of memory, then repurposes those blocks, so sometimes they need to be executable and sometimes not. There is no way to avoid using mprotect() to flip PROT_EXEC on and off with its memory management scheme, so we wrote a policy to create a gcl_exec_t type to allow that. I don't recommend it, but it is a possible avenue to take if all else fails.