[Bug 45419] New: Read-only file system
https://bugs.winehq.org/show_bug.cgi?id=45419 Bug ID: 45419 Summary: Read-only file system Product: Wine Version: 3.3 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: enhancement Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: tolikk91(a)yandex.ru Distribution: --- Created attachment 61737 --> https://bugs.winehq.org/attachment.cgi?id=61737 for example in UI Can one make a read-only option for virtual hard disks for better security? -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=45419 --- Comment #1 from Alexandre Julliard <julliard(a)winehq.org> --- This wouldn't add any security because the files can always be opened through the Unix path. You should change the permissions at the Unix level instead. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=45419 Fabian Maurer <dark.shadow4(a)web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dark.shadow4(a)web.de --- Comment #2 from Fabian Maurer <dark.shadow4(a)web.de> --- Well, technically we could for example intercept any write call to files outside of the WINEPREFIX, and prevent them. But if that's wanted is another question, sandboxing isn't one of wine's stated goals - but it could help security. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=45419 --- Comment #3 from Alexandre Julliard <julliard(a)winehq.org> --- It's always possible for an app to do direct syscalls, Wine is not a sandbox and cannot prevent that. It would only offer the illusion of security. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=45419 Fabian Maurer <dark.shadow4(a)web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |INVALID --- Comment #4 from Fabian Maurer <dark.shadow4(a)web.de> --- So, resolving as invalid. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=45419 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Read-only file system |Consider adding 'read-only' | |option for virtual drives | |for better security | |("read-only file system") CC| |focht(a)gmx.net --- Comment #5 from Anastasius Focht <focht(a)gmx.net> --- Hello folks, rewording summary. Otherwise it could be also interpreted as a bug report due to read-only filesystems. Please always try to provide a sensible summary line in first place. Bugzilla/Google search engine queries depend on the quality of the ticket fields. Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=45419 André H. <nerv(a)dawncrow.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |nerv(a)dawncrow.de Status|RESOLVED |CLOSED --- Comment #6 from André H. <nerv(a)dawncrow.de> --- closing invalid -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
participants (1)
-
wine-bugs＠winehq.org