Wine security: Prevent all but one or two applications from running

Questions about Wine on Linux
Locked
JJMCC
Newbie
Newbie
Posts: 1
Joined: Sun May 10, 2020 7:55 am

Wine security: Prevent all but one or two applications from running

Post by JJMCC »

Hi everyone,

I am using Wine under Manjaro linux. I have a need for running just two Windows programs, both of which work well with Wine. But I am concerned about opening vulnerability to malware by having Wine installed. It appears about 30% of malware could actually run successfully under Wine (see https://link.springer.com/article/10.1007/s11416-018-0319-9)

It's not realistic for me to run Wine as a separate user with restricted directory access as described here, because I need access to many of the same files with Wine that I access from my linux home directory.

I have found some instructions for limiting what programs can be run in Windows here. It looks like some manual editing of the registry can do this. One would just do

Code: Select all

wine regedit
and on from there. The idea would be to only allow the two applications I need to run, and forbid everything else.

My question is, does anyone have any thoughts about whether this is worth doing? First, is the Wine registry system similar enough to real Windows that this would work? Second, would that really stop malware?

Kind of an open-ended question, but if anyone has some security expertise I’d appreciate your input.
Locked