[Bug 49701] Could you add a "Security" tab to the WINE Config window?

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=49701

Olivier F. R. Dierick <o.dierick at piezo-forte.be> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |INVALID
             Status|UNCONFIRMED                 |RESOLVED
                 CC|                            |o.dierick at piezo-forte.be

--- Comment #2 from Olivier F. R. Dierick <o.dierick at piezo-forte.be> ---
Hello,

Please read point 7.4 (Is Wine malware-compatible?) and 7.5 (How good is Wine
at sandboxing Windows apps?) in the Wine FAQ:
https://wiki.winehq.org/FAQ#Is_Wine_malware-compatible.3F

Wine doesn't do any kind of sandboxing and that is outside the scope of the
project.

The malicious code can do direct syscall to access all unix files with the
permissions of the user running the application, effectively bypassing any
security features that would be implemented in Wine.

A security tab has no purpose because Wine doesn't provide any security
features.

As for preventing encryption of certain files or directories, that is
impossible at the Wine level. Disabling Windows encryption API will NOT prevent
malicious code to encrypt anything, using its own encryption code or even
calling Unix(Linux) encryption API. Such an option would only break legit
applications that calls the Windows Encryption API.

Security and sandboxing must be achieved at the Unix(Linux) level.

See bug 11421, bug 25537 and bug 45419 for further discussions.

Regards.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.