Bringing Wine into Main

[Scott Ritchie]

Steve Langasek wrote:
> On Tue, Dec 16, 2008 at 08:18:27PM -0800, Scott Ritchie wrote:
>> Wine can't be installed by default for several reasons.  The most
>> obvious is it won't fit on the CD - on amd64 Wine requires a few hundred
>> megabytes of 32 bit libraries to be installed.
> 
> I think the second most important one (if not necessarily the second most
> obvious) is that installing wine still compromises the security of the
> entire system by forcibly disabling certain kernel mmap checks when it's
> installed.
> 
> I really think that needs to be resolved before we should be willing to
> promote wine to main.
> 

The upstream bug for this is here, by the way:
http://bugs.winehq.org/show_bug.cgi?id=12516

I'd stop short of saying that disabling the page 0 protection is
"compromising the security of the entire system" since we didn't even
have it at all until Hardy.

Still, it does need to be fixed.

Thanks,
Scott Ritchie