Gentoo Archives: gentoo-hardened

From: "Javier J. Martínez Cabezón" <tazok.id0@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Which hardened kernel feature disables wine?
Date: Tue, 13 Jan 2009 20:16:21
Message-Id: 897813410901131216r3096e801w2c8fd1c1d22b8da0@mail.gmail.com
In Reply to: Re: [gentoo-hardened] Which hardened kernel feature disables wine? by Ned Ludd
1 I would remove first mprotect and segmexec and test.
2
3 2009/1/13 Ned Ludd <solar@g.o>:
4 > On Tue, 2009-01-13 at 11:00 -0800, Grant wrote:
5 >> I'm using the grsecurity "Gentoo (workstation)" setting in my hardened
6 >> kernel, but trying to use wine I get this:
7 >>
8 >> err:heap:HEAP_GetPtr Invalid heap (nil)!
9 >> err:heap:HEAP_GetPtr Invalid heap (nil)!
10 >> err:module:attach_process_dlls "KERNEL32.dll" failed to initialize, aborting
11 >> err:module:LdrInitializeThunk Main exe initialization for
12 >> L"C:\\windows\\system32\\wineboot.exe" failed, status c0000005
13 >>
14 >> If I remove grsecurity from the kernel, wine works fine. Does anyone
15 >> know how to fix this or which grsecurity option I can disable to
16 >> enable wine?
17 >
18 >
19 > You don't want to go into the kernel and start disabling features as
20 > that would be the wrong fix. No reason to downgrade system wide security
21 > for one app. You want to use paxctl -flags /path/to/wine-loader
22 >
23 > Personally I'm lazy and would just do.
24 > paxctl -permsx $(qlist -oe wine)
25 >
26 >
27 >
28 > --
29 > Ned Ludd <solar@g.o>
30 > Gentoo Linux
31 >
32 >
33 >