Hi! I was wondering what the reason is that the selinux-fix feature flag of cranelift-jit is not enabled by default. Does it not work for all platforms or is there a performance penalty?
I found this issue about it, but maybe you've found more reasons in the meantime? https://github.com/bytecodealliance/wasmtime/issues/4986
I'm not aware on any other reasons than that.
I'm personally still in favor of always using mmap.
I've personally used talc on top of mmap to make an allocator for executable code, it works well enough.
Alright, thank you! I'll try enabling it by default for Roto then.
Last updated: Jan 09 2026 at 13:15 UTC