you are viewing a single comment's thread
view the rest of the comments
[–] -1 points 10 months ago (3 children)

Yes, it has different wine instances for each installed application, it uses a flatpak style separation to prevent them from accessing each other.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 8 points 10 months ago (1 child)

    The reason I'm asking is that separate wineprefixes will look like a "different wine instance" to a layman, but they're not the same thing as a sandbox. Wine mounts the host filesystem under the Z: drive, and even beyond that there are probably ways to escape the Wine environment. For true sandboxing some additional layers will be required.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 9 months ago*

    From a security standpoint, yes they can be broken out of, just like a docker or a virtual machine , but they use bubblewrap to isolate environments just like flatpaks. Malicious content aside they are just as isolated and sandboxed as a docker image or vm

  • source
  • parent