Mac - better filter for the main apps vnode

Author: atcuno

volatility/plugins/overlays/mac/mac.py

@@ -1041,7 +1041,7 @@ def text_start(self):
             for map in self.get_proc_maps():
                 vnode = map.get_vnode()
 
-                if vnode and vnode != "sub_map" and vnode.v() == wanted_vnode:
+                if vnode and vnode != "sub_map" and vnode.v() == wanted_vnode and map.get_perms() == "r-x":
                     text_start = map.start.v()
                     break