[Bug 56310] New: Isolate Filesystem from Wine
https://bugs.winehq.org/show_bug.cgi?id=56310 Bug ID: 56310 Summary: Isolate Filesystem from Wine Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: enhancement Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: doomsdayrs(a)gmail.com Distribution: --- ## Background Currently, Wine by default allows Windows programs full access to the Linux file system. This, is of course inherently insecure and exposes the system to being vulnerable to malware. This is also not ideal for Atomic Systems such as Fedora GNOME Atomic, in which Wine is installed via Flatpak. ## Solution Isolate Wine from the filesystem by not mounting all drives to Wine. ## Side effects The User can no longer access drives and storage outside of wine by default. ## Side effect solution There are a few methods to solving this issue. - Provide an option in the Wine File Picker to open the XDG File Chooser instead. Documentation here: https://flatpak.github.io/xdg-desktop-portal/docs/doc-org.freedesktop.portal... - Provide an option to select directories in Wine Config. (Possible blocker is that there does not seem to be a way currently to have persistent access to a directory) - File Manager integration, providing a "Wine" or "Windows" section similar to how NextCloud does with it's nautilus integration. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=56310 Zeb Figura <z.figura12(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |WONTFIX CC| |z.figura12(a)gmail.com --- Comment #1 from Zeb Figura <z.figura12(a)gmail.com> --- See <https://wiki.winehq.org/FAQ#How_good_is_Wine_at_sandboxing_Windows_apps.3F>. Hiding the Z drive will not prevent Windows applications from accessing it anyway. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=56310 --- Comment #2 from Austin English <austinenglish(a)gmail.com> --- Closing. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=56310 Austin English <austinenglish(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #3 from Austin English <austinenglish(a)gmail.com> --- Actually closing. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
participants (1)
-
WineHQ Bugzilla