Description of problem: ❯ ps -AT o pid,tid,exe:1000,comm:1000,command:1000 |grep -i wine 48964 48964 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader steam.exe c:\windows\system32\steam.exe /home/mikhail/.local/share/Steam/legacycompat/iscriptevaluator.exe legacycompat\evaluatorscript_726360.vdf 48966 48966 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wineserver wineserver /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wineserver 48970 48970 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader services.exe C:\windows\system32\services.exe 48970 48971 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_ser C:\windows\system32\services.exe 48970 48974 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_io C:\windows\system32\services.exe 48970 48978 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_io C:\windows\system32\services.exe 48970 48984 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_io C:\windows\system32\services.exe 48970 48987 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_io C:\windows\system32\services.exe 48970 49002 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_io C:\windows\system32\services.exe 48970 49008 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_io C:\windows\system32\services.exe 48970 49013 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader services.exe C:\windows\system32\services.exe 48970 49026 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_io C:\windows\system32\services.exe 48973 48973 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48973 48976 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48973 48977 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_sechost_se C:\windows\system32\winedevice.exe 48973 48979 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48973 48980 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48973 48981 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48973 49011 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48973 49012 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48983 48983 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48983 48985 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48983 48986 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_sechost_se C:\windows\system32\winedevice.exe 48983 48988 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48983 48989 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader libusb_event C:\windows\system32\winedevice.exe 48983 48990 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48983 48994 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48983 48995 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48983 48997 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48983 49000 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48983 49001 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader winedevice.exe C:\windows\system32\winedevice.exe 48999 48999 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader plugplay.exe C:\windows\system32\plugplay.exe 48999 49003 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader plugplay.exe C:\windows\system32\plugplay.exe 48999 49004 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_sechost_se C:\windows\system32\plugplay.exe 48999 49005 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_ser C:\windows\system32\plugplay.exe 49007 49007 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader svchost.exe C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted 49007 49009 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader svchost.exe C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted 49007 49010 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_sechost_se C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted 49025 49025 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader rpcss.exe C:\windows\system32\rpcss.exe 49025 49028 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader rpcss.exe C:\windows\system32\rpcss.exe 49025 49029 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_sechost_se C:\windows\system32\rpcss.exe 49025 49030 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_ser C:\windows\system32\rpcss.exe 49025 49031 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_ser C:\windows\system32\rpcss.exe 49025 49176 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_io C:\windows\system32\rpcss.exe 49164 49164 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader conhost.exe C:\windows\system32\conhost.exe --unix --width 238 --height 53 --server 0x10 49171 49171 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader explorer.exe C:\windows\system32\explorer.exe /desktop 49171 49174 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader explorer.exe C:\windows\system32\explorer.exe /desktop 49171 49175 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_ser C:\windows\system32\explorer.exe /desktop 49178 49178 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader tabtip.exe C:\windows\system32\tabtip.exe 49178 49182 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader wine_rpcrt4_ser C:\windows\system32\tabtip.exe 49178 49183 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader tabtip.exe C:\windows\system32\tabtip.exe 49178 49187 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader tabtip.exe C:\windows\system32\tabtip.exe 49185 49185 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine-preloader iscriptevaluato Z:\home\mikhail\.local\share\Steam\legacycompat\iscriptevaluator.exe legacycompat\evaluatorscript_726360.vdf 49190 49190 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine-preloader SteamService.ex legacycompat\SteamService.exe /installscript Z:\home\mikhail\.local\share\Steam\steamapps\common\Steamworks Shared\runasadmin.vdf 228980 49193 49193 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader conhost.exe C:\windows\system32\conhost.exe --server 0x34 49198 49198 /home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine-preloader DXSETUP.exe Z:\home\mikhail\.local\share\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe /silent 49307 49307 /usr/bin/grep grep grep --color=auto --exclude-dir=.bzr --exclude-dir=CVS --exclude-dir=.git --exclude-dir=.hg --exclude-dir=.svn --exclude-dir=.idea --exclude-dir=.tox -i wine ❯ ❯ ❯ ls -laZ "/home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine-preloader" -rwxr-xr-x. 1 mikhail mikhail unconfined_u:object_r:wine_exec_t:s0 17744 Aug 11 02:48 '/home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine-preloader' ❯ ls -laZ "/home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader" -rwxr-xr-x. 1 mikhail mikhail unconfined_u:object_r:wine_exec_t:s0 18592 Aug 11 02:48 '/home/mikhail/.local/share/Steam/steamapps/common/Proton - Experimental/files/bin/wine64-preloader' SELinux is preventing wine-preloader from using the 'execheap' accesses on a process. ***** Plugin allow_execheap (53.1 confidence) suggests ******************** If you do not think wine-preloader should need to map heap memory that is both writable and executable. Then you need to report a bug. This is a potentially dangerous access. Do contact your security administrator and report this issue. ***** Plugin catchall_boolean (42.6 confidence) suggests ****************** If you want to allow selinuxuser to execheap Then you must tell SELinux about this by enabling the 'selinuxuser_execheap' boolean. Do setsebool -P selinuxuser_execheap 1 ***** Plugin catchall (5.76 confidence) suggests ************************** If you believe that wine-preloader should be allowed execheap access on processes labeled unconfined_t by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'wine-preloader' --raw | audit2allow -M my-winepreloader # semodule -X 300 -i my-winepreloader.pp Additional Information: Source Context unconfined_u:unconfined_r:unconfined_t:s0- s0:c0.c1023 Target Context unconfined_u:unconfined_r:unconfined_t:s0- s0:c0.c1023 Target Objects Unknown [ process ] Source wine-preloader Source Path wine-preloader Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-40.4-1.fc40.noarch Local Policy RPM selinux-policy-targeted-40.4-1.fc40.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Host Name (removed) Platform Linux (removed) 6.6.0-61.fc40.x86_64+debug #1 SMP PREEMPT_DYNAMIC Mon Oct 30 11:40:06 UTC 2023 x86_64 Alert Count 113 First Seen 2023-10-16 03:08:29 +05 Last Seen 2023-11-01 00:11:57 +05 Local ID 12ea481c-80a4-4393-af0d-e9f7d9865461 Raw Audit Messages type=AVC msg=audit(1698779517.579:458): avc: denied { execheap } for pid=49142 comm="wine-preloader" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process permissive=1 Hash: wine-preloader,unconfined_t,unconfined_t,process,execheap Version-Release number of selected component: selinux-policy-targeted-40.4-1.fc40.noarch Additional info: reporter: libreport-2.17.11 reason: SELinux is preventing wine-preloader from using the 'execheap' accesses on a process. package: selinux-policy-targeted-40.4-1.fc40.noarch component: selinux-policy hashmarkername: setroubleshoot type: libreport kernel: 6.6.0-61.fc40.x86_64+debug component: selinux-policy
Created attachment 1996425 [details] File: description
Created attachment 1996426 [details] File: os_info
*** This bug has been marked as a duplicate of bug 2247299 ***