(In reply to Fabian Vogt from comment #15) > At least noexec would break the current transactional-update self-update > mechanism. Then we have to fix that. "noexec" is a requirement from several RFI and will come.