curious users might figure out how to get around this... but you can be a bit more stealthy so its less likely someone can run whatever they want. make a launcher program called wine that is used to launch the program you want.. that only allows the one you want to be run... anything else will not run. It will launch by using some other file you've somehow hidden as the executable for wine... renaming wine to whatever, maybe a hidden file, or something unsuspecting. If anyone tries the wine command it'll actually be using your custom launcher program instead of the real wine executable. Anyone who finds out what the real wine executable is named will be able to use it though.... unless you purposefully make it where it cannot run because it cannot find its libraries unless its launched a certain way, which you have in your custom launcher program (which can't be a plain text script or they can just read it easy). That can still be figured out by enterprising users if they really want to. I cannot think of any 100% sure way to prevent the "wine" command from being used as it was designed to be used.
