Comment 11 for bug 401950

Revision history for this message
In , Scott Ritchie (scottritchie) wrote :

I thought the security of CAP_SYS_RAWIO rather than mmap_min_addr wasn't to make Wine more secure, but to make the system more secure when Wine isn't running. The kernel bug above, for instance, was exploitable by non-wine programs if the user merely had Wine installed.