Firejail: [Documentation] How to utilize FireJail with Wine

[asdfghjz]

Question: How to utilize FireJail with Wine?

[Vincent43]

The same way as any other app. Instead of wine *.exe use firejail wine *.exe from console or edit wine app launcher and add firejail prefix. The default wine profile is here: https://github.com/netblue30/firejail/blob/master/etc/wine.profile

[asdfghjz]

@Vincent43 Ahh, ok. Thanks!

[asdfghjz]

@Vincent43 Are there any security/privacy vulnerabilities with utilizing the default wine profile?

[Vincent43]

The default profile uses blacklists which should block access to common sensitive files but may be not tailored to your specific system if you store important files in various non-standard locations.

To use whitelists you may add:

include /etc/firejail/whitelist-common.inc
whitelist ${HOME}/.wine
whitelist ${HOME}/.local/share/wineprefixes

plus other /home directories you want to access in /etc/firejail/wine.local file (you may need to create it).

It also allows network access, if you don't want it then you may add --net=none option after firejail, i.e. firejail --net=none wine *.exe in launcher/console or add it to wine.local as described above.