From f0654310e17b0c06c48491f0e980884f5a994d97 Mon Sep 17 00:00:00 2001
From: Davide Grilli <davide.grilli@outlook.com>
Date: Wed, 6 May 2026 13:27:16 +0200
Subject: [PATCH] fix: add seccomp=unconfined and SYS_PTRACE to Windows Docker
 build for WSL2 Wine compatibility

---
 contrib/build-wine/build.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/contrib/build-wine/build.sh b/contrib/build-wine/build.sh
index c10e8751a..0b96fc570 100755
--- a/contrib/build-wine/build.sh
+++ b/contrib/build-wine/build.sh
@@ -48,10 +48,10 @@ else
     info "not doing fresh clone."
 fi
 
-DOCKER_RUN_FLAGS=""
+DOCKER_RUN_FLAGS="--security-opt seccomp=unconfined --cap-add SYS_PTRACE"
 if sh -c ": >/dev/tty" >/dev/null 2>/dev/null; then
     info "/dev/tty is available and usable"
-    DOCKER_RUN_FLAGS="-it"
+    DOCKER_RUN_FLAGS="$DOCKER_RUN_FLAGS -it"
 fi
 
 info "building binary..."