[Bug 19732] Security: use CAP_SYS_RAWIO during start up to map the memory below mmap_min_addr instead of permanently lowering it at install time

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=19732





--- Comment #5 from Alexandre Julliard <julliard at winehq.org>  2009-08-16 12:31:20 ---
(In reply to comment #4)
> Are you saying that if I remove the disabling of mmap_min_addr entirely
> from the packaging Wine will continue to function as before?  Do we no
> longer need the DOS memory area at all?

No, of course we need it. Though I'm not convinced that making Wine
CAP_SYS_RAWIO is really safer than setting the mmap_min_addr to 0. It would
need testing to see how early we can drop the capability, but if we have to
load the DOS subsystem first then it's the same as not dropping it at all.

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.