Re: [gentoo-hardened] Which hardened kernel feature disables wine?

[Grant <emailgrant@gmail.com>]

>>> I'm using the grsecurity "Gentoo (workstation)" setting in my hardened
>>> kernel, but trying to use wine I get this:
>>>
>>> err:heap:HEAP_GetPtr Invalid heap (nil)!
>>> err:heap:HEAP_GetPtr Invalid heap (nil)!
>>> err:module:attach_process_dlls "KERNEL32.dll" failed to initialize, aborting
>>> err:module:LdrInitializeThunk Main exe initialization for
>>> L"C:\\windows\\system32\\wineboot.exe" failed, status c0000005
>>>
>>> If I remove grsecurity from the kernel, wine works fine.  Does anyone
>>> know how to fix this or which grsecurity option I can disable to
>>> enable wine?
>>
>>
>> You don't want to go into the kernel and start disabling features as
>> that would be the wrong fix. No reason to downgrade system wide security
>> for one app. You want to use paxctl -flags /path/to/wine-loader
>>
>> Personally I'm lazy and would just do.
>> paxctl -permsx $(qlist -oe wine)
>>
>>
>>
>
> This one should do the trick:
>
> paxctl -m /usr/bin/wine-preloader

Thanks everyone, that worked great.  Is there a way to get a list of
files which have been operated on by paxctl?  I didn't see anything in
man paxctl.

- Grant