harden wine

1 files changed, 4 insertions, 0 deletions

diff --git a/etc/wine.profile b/etc/wine.profile
index 67e3952e1..901340052 100644
--- a/etc/wine.profile
+++ b/etc/wine.profile
@@ -11,6 +11,7 @@ noblacklist ${HOME}/.local/share/Steam
 noblacklist ${HOME}/.local/share/steam
 noblacklist ${HOME}/.steam
 noblacklist ${HOME}/.wine
+noblacklist /tmp/.wine-*
 
 include disable-common.inc
 include disable-devel.inc
@@ -18,6 +19,8 @@ include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
 
+include whitelist-var-common.inc
+
 # some applications don't need allow-debuggers, comment the next line
 # if it is not necessary (or put 'ignore allow-debuggers' in your wine.local)
 allow-debuggers
@@ -28,6 +31,7 @@ nodvd
 nogroups
 nonewprivs
 noroot
+# nosound
 notv
 # novideo
 seccomp