Re: Wine/DosBox (in)security settings

[nia <nia%NetBSD.org@localhost>]

On Wed, Apr 03, 2024 at 03:56:22PM +0200, Joerg Sonnenberger wrote:
> On Wednesday, April 3, 2024 1:17:05 PM CEST nia wrote:
> > On Mon, Apr 01, 2024 at 04:17:55PM +0200, Dan-Simon Myrland wrote:
> > > security.pax.mprotect.enabled=0
> > > security.pax.aslr.enabled=0
> > 
> > I am worried that this is because of the behaviour of libGL.
> > This should not be necessary.
> 
> It makes perfect sense for dosbox to require both. I also wouldn't be
> surprised if Windows software at least fails with mprotect hardening.
> 
> Joerg
> 
> 
>

We discussed this on IRC and the mprotect-disabled requirement isn't
coming from dosbox's binary. If all that's changed is the OS version,
chances increased that this isn't the fault of dosbox.

We previously had problems with text relocations coming from Mesa
ELF TLS.