SoC 2012 Ideas

[Alex Bradbury]

On 29 March 2012 10:01,  <Joerg-Cyril.Hoehle at t-systems.com> wrote:
> BTW, I once defined a set of iptable rules to prevent networking for Wine (or was it for a whole user?)
> based on the consideration that the apps I use have nothing to do with networking.
> Here too, nothing need be changed in Wine.

You can also add a 'nonet' group, configure an iptables rule to drop
all packets from that gid and then use sg to execute wine using that
nonet group. Of course this assumes the apps you run don't or can't
switch from nonet to another group.

Alex