0

After installing Wine I found that there is a z drive that has direct access to root folder. I have seen many threads and news about virus affecting a linux system through wine. How do I make it more secure?

2 Answers 2

3

Run wine via firejail.

Some examples and discussion: https://github.com/netblue30/firejail/issues/2219

5
  • Is this the most secure option or are there better ones without large performance drop? If you use it only for games does it help creating a new user? How can one use firejailed Wine in Lutris (for games)?
    – mYnDstrEAm
    Oct 13, 2022 at 8:52
  • Firejail shouldn't incur a visible performance drop unless you've got an ancient CPU. Using a separate user is a good option but it's quite an inconvenient one. Oct 14, 2022 at 14:17
  • Deleting z: from Wine does literally nothing. Windows applications can run Linux binaries directly even when z: does not exist. It used to work in the past (over three years ago) but then Wine developers dropped this feature as a security theater. Oct 14, 2022 at 14:18
  • Do you have a link concerning deleting Z:? It's probably irrelevant whether one does that if it's sandboxed with firejail to only access allowed dirs anyway. Performance drop was only referring to other options besides firejail. Is it maybe possible to run an app as the new restricted user from the root user to make it more convenient?
    – mYnDstrEAm
    Oct 14, 2022 at 14:29
  • z: -> bugs.winehq.org/show_bug.cgi?id=25537 The feature was dropped 12 years ago. Oct 14, 2022 at 14:32
1

sandwine could be an alternative to firejail for Wine. Its readme has details on the underlying threat model and what is exposed to the application by default.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .