I think CAP_SYS_RAWIO is the wrong way to handle this, actually. This still leaves Wine able to use the 0 page, which is what needs to be avoided.
I think CAP_SYS_RAWIO is the wrong way to handle this, actually. This still leaves Wine able to use the 0 page, which is what needs to be avoided.