Re: [gentoo-hardened] Which hardened kernel feature disables wine?

[Ned Ludd]

On Tue, 2009-01-13 at 11:00 -0800, Grant wrote:
> I'm using the grsecurity "Gentoo (workstation)" setting in my hardened
> kernel, but trying to use wine I get this:
>
> err:heap:HEAP_GetPtr Invalid heap (nil)!
> err:heap:HEAP_GetPtr Invalid heap (nil)!
> err:module:attach_process_dlls "KERNEL32.dll" failed to initialize, aborting
> err:module:LdrInitializeThunk Main exe initialization for
> L"C:\\windows\\system32\\wineboot.exe" failed, status c0000005
>
> If I remove grsecurity from the kernel, wine works fine.  Does anyone
> know how to fix this or which grsecurity option I can disable to
> enable wine?


You don't want to go into the kernel and start disabling features as
that would be the wrong fix. No reason to downgrade system wide security
for one app. You want to use paxctl -flags /path/to/wine-loader

Personally I'm lazy and would just do. 
paxctl -permsx $(qlist -oe wine)



-- 
Ned Ludd <solar@g.o>
Gentoo Linux