Hello everybody, I think Wine is a great project. I am still new to linux (running Ubuntu, for that matter) but I have started to delve into rights management and security, so I have a question concerning the setup of Wine: Is it really advisable to link so many of may Linux home folders to the simulated Windows environment? If a windows virus deploys within the simulation and tries to delete *.doc files, for example - a lot of such viruses exist - then it could do so within my home directory on the Linux side, correct? So I tried to delete all the preconfigured links between Wine/windows-directories and my "home" directory. the relevant lines are just blank now (I use winecfg from my ubuntu/gnome applications menu). However, when I tried a windows program (old game Jedi Knight 2, btw), it asked whether it should create a link on my desktop. Which I told it to do, believing that the link would end up within home/.wine/drive_c/windows/profiles/... /desktop Which it did, but it also showed up on my linux desktop (home/.../desktop). So the link is still between windows desktop and linu desktop is still working, right? And what about the other links to my home directories, are they working too? How can I switch this off, and should I do it? Is this dangerous or not?
JerryQuest wrote:> Hello everybody, I think Wine is a great project. I am still new to linux (running Ubuntu, for that matter) but I have started to delve into rights management and security, so I have a question concerning the setup of Wine: Is it really advisable to link so many of may Linux home folders to the simulated Windows environment? If a windows virus deploys within the simulation and tries to delete *.doc files, for example - a lot of such viruses exist - then it could do so within my home directory on the Linux side, correct?Yes. Anything your user can do Wine can so does any program running on Wine. JerryQuest wrote:> How can I switch this off, and should I do it? Is this dangerous or not?You can do that in winecfg by un-checking "link" check-box. And removing mapping for the Z: drive. However this will not stop Wine from accessing the entire disk - everything your user can.
Ok, I understand that Wine itself will still be running with my user rights. But I want to stop the simulated Windows from accessing my personal folders, except the home/user/.wine of course. I un-checked the check boxes, but why can Windows still place a link to a Windows program on my Linux desktop?
JerryQuest wrote:> > I un-checked the check boxes, but why can Windows still place a link to a Windows program on my Linux desktop?Because you can. The only way I can think of to get the level of security you want would be to create a separate user account solely for running Wine. That account would have access to everything in its own home folder, but not your regular one.
Exactly what I mean. Wine should not enable the simulated Windows to access my Linux desktop if the respective check-box is NOT activated. This is either a bug or wrong design.
Just a script for creating a nice icon? Thanks! Thats ok of course. Would be pleasing instead of frightening if somebody would care to write it down somewhere in the documentation. Very good to know.