6a70f2e
- Attempt to add selinux awareness; check if we can map executable memory and fail softly if not. Removes the need for allow_execmem from huge chunks of the desktop.