hellork other option is use a selinux sandbox. Linking to libc6 is not required to get out of wine. Call some wine internal but exported functions even if z: is not mapped you can get files. How do you think wine loads its dll.so and exe.so files that are in /usr/*/lib/wine when z: is not mapped. Basically wine is not a sandbox thinking it so will get you ass cooked. If you don't want wine going places sandbox it by user by selinux by something.
