I recently installed WINE on Xubuntu for the first time, and was impressed/alarmed that I could execute any number of (small) programs on my NTFS partition by simply clicking them. Moreover an application installed within the WINE "c drive" is capable (as evidenced by file->open dialogs) of accessing any file to which the user has rights, not simply the virtual drive. I'd really like to have it so that no Windows app outside of the WINE folder executes, and no authorized apps can see anything outside of the folder. Is there a way to accomplish this (other than chroot)?

Thanks.

Start with http://wiki.winehq.org/SecuringWine and http://wiki.apparmor.net/index.php/AppArmorWine ?

1 members found this post helpful.

Those are useful. It appears that running "winetricks sandbox" on the cli solves the access problem. AppArmor's going to take me some time to learn, but I think it'll handle the execute problem. Thanks for your help!