Sylvain Petreolle spetreolle@yahoo.fr writes:
With this patch, a script can ask : ping something. Even if ping.exe is not there, CreateProcess will allow /bin/ping. This will work, as it's found and allowed for a normal unix user.
There is no way to prevent a Windows application running under Wine from doing everything a Unix application could do. Even if you don't let CreateProcess launch Unix programs the Windows app can always do a straight system call. If you want to avoid inadvertently running /bin/ping you can make sure /bin is not accessible from a DOS drive. But you can't prevent a malicious app from doing it.