I persuaded my friends to convert to Linux, now they want Sketchup! They are the sort of people who would click on anything and I don't want them to get malware etc. Is there a way to make Wine run *only* Sketchup and nothing else? I did try searching for the answer but couldn't find one. Thanks
Bonxie <wineforum-user at winehq.org> wrote at Jun 11, 2010 7:04 AM> >I persuaded my friends to convert to Linux, now they want Sketchup! >They are the sort of people who would click on anything and I don't want them to get >malware etc. > >Is there a way to make Wine run *only* Sketchup and nothing else?No. That is the simple answer. The more complex answer is that, yes you can change the ownership of the .wine directory so that NOTHING can be added/deleted and then point the temporary file directory to somewhere else. This is not as trivial as it seems and is best left as an exercise for the student.> >I did try searching for the answer but couldn't find one.That is because we have discouraged this in the past, but if you read through the forum you will discover that past attempts have failed. James McKenzie
Thanks, I will have to scratch my head for a while about this. I'm dealing with folk who can only just copy a file, this could take some time! If I solve the problem I will get back to you.
Bonxie <wineforum-user at winehq.org> wrote at Jun 11, 2010 9:12 AM:> >Thanks, I will have to scratch my head for a while about this. >I'm dealing with folk who can only just copy a file, this could take some time! >If I solve the problem I will get back to you. >As an (ISC)2 SSCP, I can state that many companies have tried to institute what you want, but the biggest thing you can do is educate. Teach your users to NOT click on that link and to NOT install software unless it comes from your company. Your company should also use AV scanners. ClamAV is available for Linux and is very inexpensive. Also your company might want to look at using imaging to rebuild systems that have been infected with malware, which does exist for Linux and MacOSX, quickly. Again, configuring Wine to support non-installation of software is complex and in some cases bypassable. As to the regular Wine audience, this topic has been brought up in the past and will be in the future. Please take time to carefully read through the above. Basically, a small dose of prevention (that is preventing people from reaching sites with malware) is a lot easier than correcting (that is rebuilding every system in your enterprise). This has been true for a long time and should be common knowledge among system administrators and system operators. Very respectfully, James McKenzie
On Fri, 2010-06-11 at 09:04 -0500, Bonxie wrote:> I persuaded my friends to convert to Linux, now they want Sketchup! > They are the sort of people who would click on anything and I don't want them to get malware etc. > Is there a way to make Wine run *only* Sketchup and nothing else? > > I did try searching for the answer but couldn't find one. >One way would be to install it in a dedicated login on a server. The setup could be done like this. 1) Create a normal login called 'wineapp' 2) login to wineapp and create a directory called 'bin' 3) Use a text editor to create a script called runwineapp in bin: ==================== start of 'runwineapp' script =====================#!/bin/bash # # Make sure only one user can run the application at a time # if [ -f in_use ] then echo "Sorry - the application is in use" echo "Try again later" exit else >in_use fi # # CD to the directory where the application is installed # cd '.wine/drive_c/Program files/TheApplication' application # # Now run the application # wine application.exe # # Remove the in use marker # cd rm in_use exit ==================== end of 'runwineapp' script ===================== 4) Make the script executable: chmod uga+x /home/wineapp/bin/runwineapp 5) Use the user maintenance tool to change the shell to be used on login from /bin/bash to /home/wineapp/bin/runwineapp NOTE: If the user maintenance tool won't let you change the shell use the usermod command line program: - login as root, use sudo or su - run the command: usermod wineapp -s /home/wineapp/bin/runwineapp 6) If you, as application admin, need access as a normal user to wineapp, you should set up a second user that is the same in all respects as wineapp (including the user and group IDs) by using the useradd utility with the -o option, which lets you add add a user with a duplicate user id. Now, when the user logs in to wineapp, the application will be run immediately and the 'in use' marker will be set. When the user exits from the application the 'in use' marker will be unset and the user will be logged out, but if you log in as the wineapp admin, you'll get a normal login desktop. HTH Martin
> One way would be to install it in a dedicated login on a server. The > setup could be done like this. >That sounds interesting but I'm busy for the next few days. I will definitely give it a try next week and post back with the results.