Enhancement request: Sandboxie and Wine a dream team?

[orleans]

Sandboxie is an app that allow to sandbox apps on Windows. In my opinion this software would fit greatly into wine and would - in many cases - remove the need to use wineprefixes to separate applications and would help backup application with it's pure files and without non-application files. Sadly I was not able to run it with wine. But anyway I see it as a core feature for wine.

[desessarts]

Can you post what you did and the error messages?

[DarkShadow44]

Sandboxie heavily relies on a driver for sandboxing, this will probably never work in Wine. If you want sandboxing, use Linux sandboxing solutions like bubblewrap or firejail.

[orleans]

I would never assume that an integration of Sandboxie into wine would be a simply copy and paste.
But Sandboxie has a lot of years knowledge about application Sandboxing on Windows.
I assume these synergies that could help:

• hide from detecting by application
• knowledge about seperation between application and System.
• separate Userdata and appdata
• sandboxing

I'm not a developer, so i don' know how difficult it would be to either use the sandboxie driver or replace parts wit a linux solution.

What ever the best solution would be. Sandboxing is important for wine. Firejail is good but I would not let this security subject on the user. As an example I have 25 years of Games in Wine. every installation with a least 10jears no updates. Some games shows error messages because Domains not exist.(No problem if they belife there is no Internet)

Deactivating Internet, access to other application and limit access to Linux is more and more important.

[DarkShadow44]

Knowledge about sandboxing in windows doesn't help much though, since Wine is running on Linux. There is no windows kernel to hook into. IMHO, it would be a lot easier to rewrite Sandboxie from scratch for Linux than to make it work in Wine. And then you have a Linux sandboxing solution, which you should have used to begin with.

[desessarts]

I am with DarkShadow44 on this

bubblewrap or firejail are 2 good options, they work, while sandboxie may need (little or a lot of) work

and the wine team has already a lot on their plate

[desessarts]

to orleans

if you read french , 3 links on how to sandbox with bubblewrap

https://linuxfr.org/users/moonz/journau ... ll-basique

https://linuxfr.org/users/moonz/journau ... -de-bureau

https://linuxfr.org/users/moonz/journau ... de-gestion

this works today

even if you don't read french, it is much self explanatory