I had fun with SELinux when using Haskell for CGI programs. The default SELinux policy forbids CGI programs that execute code in their data segment. I had to write a policy module that allowed httpd_sys_script_t self:process execmem. Oh joy. John