With the kern.elf64.allow_wx sysctl set to 0 (disabling simultaneously W+X memory) pcre2 fails, as observed e.g. via `git log` $ git log --author=imp fatal: Couldn't JIT the PCRE2 pattern 'imp', got '-48' I'm opening this PR to track the issue as we try to figure out how to deploy mitigations like this more widely, but do not yet have a suggestion on a path to addressing this.