On 29 March 2012 10:01, <[email protected]> wrote: > BTW, I once defined a set of iptable rules to prevent networking for Wine (or > was it for a whole user?) > based on the consideration that the apps I use have nothing to do with > networking. > Here too, nothing need be changed in Wine.
You can also add a 'nonet' group, configure an iptables rule to drop all packets from that gid and then use sg to execute wine using that nonet group. Of course this assumes the apps you run don't or can't switch from nonet to another group. Alex
