[Bug 518989] [NEW] Allow Wine ICMP/ping without running as root

[Scott Ritchie]

Public bug reported:

Binary package hint: wine1.2

The program Ping Plotter is a network analysis tool that works under
Wine, but only when run as root.  Running Wine as root is something that
should be avoided, both for security and usability reasons (sudo can
mess up the ownership of files in the Wine folder).

One option is to use an SELinux feature and give Wine CAP_NET_RAW
capability, which is something that should be done for the system ping
as well (which I believe currently runs setuid root).  The downside
would be that any Windows program could then open raw sockets.

An old mail suggests another possibility:
http://www.winehq.org/pipermail/wine-devel/2007-December/061479.html  --
splitting Wine into different binaries with different permissions
levels.  I'm not sure how viable this is, as it would depend on
splitting off different parts of the Windows API into secured and non-
secured functions and then moving those functions into separate
binaries.  That would only be useful if there was an actual restricted
(non-general) use of raw sockets in the API.

** Affects: wine1.2 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Allow Wine ICMP/ping without running as root
https://bugs.launchpad.net/bugs/518989
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs