Stream: cranelift

Topic: selinux-fix drawbacks?


view this post on Zulip Terts Diepraam (Dec 19 2025 at 15:23):

Hi! I was wondering what the reason is that the selinux-fix feature flag of cranelift-jit is not enabled by default. Does it not work for all platforms or is there a performance penalty?

view this post on Zulip Terts Diepraam (Dec 19 2025 at 15:28):

I found this issue about it, but maybe you've found more reasons in the meantime? https://github.com/bytecodealliance/wasmtime/issues/4986

This currently behind the selinux-fix feature flag. SELinux doesn't allow making parts of the heap executable. In addition it seems that there is an issue in multithreaded environments causing perm...

view this post on Zulip bjorn3 (Jan 03 2026 at 18:50):

I'm not aware on any other reasons than that.

view this post on Zulip bjorn3 (Jan 03 2026 at 18:50):

I'm personally still in favor of always using mmap.

view this post on Zulip Amanieu (Jan 03 2026 at 19:35):

I've personally used talc on top of mmap to make an allocator for executable code, it works well enough.

A fast and flexible allocator for no_std and WebAssembly

view this post on Zulip Terts Diepraam (Jan 04 2026 at 21:20):

Alright, thank you! I'll try enabling it by default for Roto then.


Last updated: Jan 09 2026 at 13:15 UTC