On 2026/09/29 11:16, Theo de Raadt wrote:
> > There a ground swell of WINE interest out there?
> 
> I thought WINE had an additional requirement that page 0 of a process
> be mappable.  We don't permit that for any process any architecture.
> Has that changed?   If not, I suspect there are numerous things WINE
> needs which are a bad idea, because if we give something for WINE, another
> thing will use that capability as attack surface.

AIUI page 0 was needed for WINE's DOS emulator (vm86) but not for
Windows.

Apparently new versions can run 32-bit Windows binaries from a 64-bit
WINE process, too.

But I think it may need user LDT (at least for some things) and I'm
seeing some ucontext #includes.