[Wine] how to restrict user from running apps

Martin Gregorie martin at gregorie.org
Tue Dec 7 10:15:03 CST 2010


On Tue, 2010-12-07 at 09:12 -0600, Hikaru-71 wrote:
> Hi! I have small question: is it possible to limit user when using
> wine. For example allow for a certain user to run only 1 application?
> 
Yes. Its called a "captive login"

Are you expecting the user to be logging in from the Linux console or
over the network? The way you implement it will be different in each
case. 

Simply changing the login for that user with the user management tool
may do the trick for console logins - or not, depending on the run-time
requirements of the single application, but basically you'd change the
Login shell: setting it to something like:

/bin/bash -c /path/to/application

might do it for you, but I suggest you do a search on 'captive login'
and read up on it and/or ask your distro's support forum before trying
it. Its not necessarily straight forward to do and a simple approach may
not stop a determined visitor from breaking out of your captive login
jail.

You'd do well to also look at "chroot login" as well, though this link
may give you a headstart:
http://www.kegel.com/crosstool/current/doc/chroot-login-howto.html


Martin







More information about the wine-users mailing list