http://bugs.winehq.org/show_bug.cgi?id=25537
Summary: Wine allows access to / regardless configured ~/.wine/dosdevices Product: Wine Version: 1.3.9 Platform: All OS/Version: other Status: UNCONFIRMED Severity: critical Priority: P2 Component: wineserver AssignedTo: wine-bugs@winehq.org ReportedBy: t.artem@mailcity.com
Probably since 1.3.8 or 1.3.9 any Windows application can open (read/write/list/erase) any files in / (root) regardless user defined disk devices (under ~/.wine/dosdevices).
It's a huge security issue, because in the past you could erase z: -> / symbolic link and safely run any software (including malware).
This security measure has been removed without any explanations how to harden your Wine PREFIX.