[Bug 59254] New: When hardened by net.core.bpf_jit_harden = 2, wine

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=59254

            Bug ID: 59254
           Summary: When hardened by net.core.bpf_jit_harden = 2, wine
           Product: Wine
           Version: 10.0
          Hardware: x86-64
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: -unknown
          Assignee: [e-mail]
          Reporter: [e-mail]
      Distribution: ---

Many online hardening guides tell you to set 2 as "net.core.bpf_jit_harden"
sysctl value. Unfortunately, after I set that many EXE files started
misbehaving:

kernel: ptrace attach of "C:\...\x5cGame.exe"[998022] was attempted by
"/usr/lib/wine/wineserver64 -p0"[997872]

I had a hard time narrowing down the problem.

## Suggestion

If this happens, display "Set net.core.bpf_jit_harden to 1 or 0" dialog or
journal log.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.

[Bug 59254] When hardened by kernel.yama.ptrace_scope = 2

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=59254

Li Yuan <[e-mail]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|When hardened by            |When hardened by
                   |net.core.bpf_jit_harden =   |kernel.yama.ptrace_scope =
                   |2, wine                     |2

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.

[Bug 59254] When hardened by kernel.yama.ptrace_scope = 2

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=59254

--- Comment #1 from Li Yuan <[e-mail]> ---
My mistake;

NOT:
net.core.bpf_jit_harden

CORRECT:
kernel.yama.ptrace_scope

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.

[Bug 59254] When hardened by kernel.yama.ptrace_scope = 2

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=59254

--- Comment #2 from Li Yuan <[e-mail]> ---
Actually why not use `setcap` when installing/upgrading wine? Many hardened
users have same problem so why not do something in install script?

See:
https://askubuntu.com/questions/146160/what-is-the-ptrace-scope-workaround-f...

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.