<p><span class="h-card" translate="no"><a href="https://bsd.network/@reynir" class="u-url mention">@<span>reynir</span></a></span> <span class="h-card" translate="no"><a href="https://nondeterministic.computer/@mjg59" class="u-url mention">@<span>mjg59</span></a></span> I know that for OpenBSD, we apply a mprotect to set, on the host side, flags to X and RD_ONLY the vm: <a href="https://github.com/Solo5/solo5/blob/0a1b9507dd6bb7715d3016aaef96096448e52b4a/tenders/hvt/hvt_openbsd.c#L192" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="ellipsis">github.com/Solo5/solo5/blob/0a</span><span class="invisible">1b9507dd6bb7715d3016aaef96096448e52b4a/tenders/hvt/hvt_openbsd.c#L192</span></a></p>