[Bug 19732] Security: use CAP_SYS_RAWIO during start up to map the memory below mmap_min_addr instead of permanently lowering it at install time

http://bugs.winehq.org/show_bug.cgi?id=19732

--- Comment #5 from Alexandre Julliard   2009-08-16 12:31:20 ---
(In reply to comment #4)
> Are you saying that if I remove the disabling of mmap_min_addr entirely
> from the packaging Wine will continue to function as before?  Do we no
> longer need the DOS memory area at all?

No, of course we need it. Though I'm not convinced that making Wine
CAP_SYS_RAWIO is really safer than setting the mmap_min_addr to 0. It would
need testing to see how early we can drop the capability, but if we have to
load the DOS subsystem first then it's the same as not dropping it at all.