<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
</head>
<body bgcolor="#ffffff" text="#000000">
<font face="Trebuchet MS"> There should be documentation in place
beyond a simple entry in the appdb, since you all know as well as I do
that the database does not and cannot cover every piece of software out
there. For the most part, people don't even know it exists or they
don't use it.<br>
<br>
There will be documentation about security, explaining what you could
do/how you could run Wine and what kind of security that means.<br>
eg:<br>
</font>
<ul>
<li><font face="Trebuchet MS">Running as root: Programs running under
Wine have full access to your system. A malicious program could damage
your OS as well as read and write all of your personal files,
passwords, etc.</font></li>
<li>Running as user: Programs running under Wine have access to your
personal files in ~/ . A malicious program could read and write all
files that the user can read and write.<br>
</li>
<li><font face="Trebuchet MS">Creating a separate user and...</font></li>
<ul>
<li><font face="Trebuchet MS">Logging into the user from kdm/xdm: </font><font
face="Trebuchet MS">Malicious programs can access only the
special user's files. If the malicious program deletes this user's
files, only the Wine-installed applications are at risk.</font></li>
</ul>
<ul>
<li><font face="Trebuchet MS">Running with sudo -u : Same as above.
Requires X permissions be transferred and extra setup steps. Relies on
no bugs present in the sudo program<br>
</font></li>
</ul>
</ul>
This level of security info is something everyone should have easy
access to and know before starting Wine. Of course, wherever I'm not
accurate, feel free to fill in!<br>
</body>
</html>