Lastcoder wrote:
.. it's okay if WINE is no sandbox, a sandbox is more than special file handling ..
.. but from the technical & practical point of view I just don't see any reason why WINE has to give windows applications access to pathes or file structures out of the configured Drives. In former DOS times you hooked INT 13h and INT 21h, in windows you have to gain control of win32 file functions (which is basic knowledge of every better-than-scripptkidies-malware author ..) ... you guys managed to map the whole absolutely ugly windows stuff to kernel functions and want to tell me that this impossible ???
Ah, now I see what you want, a sandbox. If that is what you NEED, then
get virtualbox and go and buy a copy of Windows. That is NOT what Wine
is supposed to be (BTW, I can see the entire contents of my C:\ drive on
a LOCKED DOWN system. I just cannot touch anything. )
If that is what you want, that is an effort in progress (mapping Windows
capabilities to the Extended Linux file permissions.)
James McKenzie
