Re: [gentoo-hardened] Which hardened kernel feature disables wine?

[Thomas Sachau]

Ned Ludd schrieb:
> On Tue, 2009-01-13 at 11:00 -0800, Grant wrote:
>> I'm using the grsecurity "Gentoo (workstation)" setting in my hardened
>> kernel, but trying to use wine I get this:
>>
>> err:heap:HEAP_GetPtr Invalid heap (nil)!
>> err:heap:HEAP_GetPtr Invalid heap (nil)!
>> err:module:attach_process_dlls "KERNEL32.dll" failed to initialize, aborting
>> err:module:LdrInitializeThunk Main exe initialization for
>> L"C:\\windows\\system32\\wineboot.exe" failed, status c0000005
>>
>> If I remove grsecurity from the kernel, wine works fine.  Does anyone
>> know how to fix this or which grsecurity option I can disable to
>> enable wine?
>
>
> You don't want to go into the kernel and start disabling features as
> that would be the wrong fix. No reason to downgrade system wide security
> for one app. You want to use paxctl -flags /path/to/wine-loader
>
> Personally I'm lazy and would just do.
> paxctl -permsx $(qlist -oe wine)
>
>
>

This one should do the trick:

paxctl -m /usr/bin/wine-preloader

-- 
Thomas Sachau

Gentoo Linux Developer