Why is the sealed mapping unmapped on exec*()? What about spawn and fork? Are there libraries for handling this yet? > IIRC, with CPython the NX bit doesn't w

Why is the sealed mapping unmapped on exec*()? What about spawn and fork? Are there libraries for handling this yet? > IIRC, with CPython the NX bit doesn't work when any imported C extension has nested functions / trampolines How should CPython support the mseal() syscall?