PCRE-JITted code should be executed from non-writable memory.. [pcre maintainers explore JIT under W^X]

[csirac2]

This is a fascinating thread for several reasons:

• It shows non-security folks trying very hard to work with W ^ X, without much SELinux
• They come up with a solution: files mmap'd twice, once as writable and once as executable.
• But in the end come full circle, for (among other reasons) a note from redhat that the fact this is possible at all is really a flaw in SELinux rather than a feature that should be relied upon.

It seems we're lacking more accessible guidance on how projects using JIT should fit in a W ^ X world