access restrictions / sandbox

[Marcus Meissner]

On Thu, Jul 05, 2007 at 03:03:27PM +0100, Ioannis Nousias wrote:
> Hello wine developers,
> 
> I'm running Wine on Linux. Is there a way to restrict wine from 
> accessing some folders and/or resources? Ideally have Wine restraint in 
> its WINEPREFIX directory and configure what resources it could access 
> (like network for instance).
> 
> I've seen few talks on having a 'sandbox' that date back to 2002 and 
> most conclusions suggest that access restrictions should be made on the 
> host OS. If that's the case, any tips on how one could do that in Linux 
> would be appreciated.

AppArmor, SELinux.

Or use a seperate "Wine" user and use ssh -X wineuser at localhost
(but this one could break out of it too).

Ciao, Marcus