DescentBB

I'm trying to decide if I should get the best virus scanner that runs on windows, to run within wine to scan my wine directory, or should I get the best Linux virus scanner, which is designed for scanning windows and wine directories.

Or should I not even worry about virii in wine?

I have clamav, and use it every once in a blue moon. I don't keep the daemon running.

snoopy wrote:I have clamav, and use it every once in a blue moon. I don't keep the daemon running.

Sounds good. I'll do the same.

I doubt you could get any real-time Windows AV scanner working in wine. They integrate pretty intimately with the Windows kernel.

Here's what I'd recommend to secure yourself:

Isolate wine. Go into winecfg and remove the links to your root directory, and your home directory. It's a bit of a pain to have to go into ~/.wine/drive_c/ for everything, but it means that anything malicious that you run can't get at any directory lower than that and hose up your linux data.

NEVER run wine as root. You know about that, I'm sure, but don't forget it. I fact, I think it all sorts of chokes when you try to, which is a good thing.

Scan individual windows files as you download them. Your windows consumption is probably small enough that it isn't that bad of a process to download, scan, move to drive_c. Heck you can even script that process.

This is an excellent idea, and I already expect a few specific problems, which I'm not worried about. MS Office access Ubuntu's fonts, which is pretty cool, but unnecessary.

I deleted the links, however, MS Word is still able to view everything / and down. I'll figure it out! Don't tell me the answer!!!!! It should be easy. I'll post what I did when I'm done.

Thanks!!

update --
removed the mapping of the Z drive under drives.
This gives Wine applications visibility of /
I've restricted wine applications to it's "c drive" and to a special folder in ~/ called "Windows Documents", which is linked to My documents for wine apps. Wine also has access to /media/

Next I'm getting clamav, but I'm reading a bit first before I jump in.

The Z drive mapping is the biggie. Really it's just a precautionary measure, because the programs wouldn't have had write-access anyways, but now they won't even have read access.

oooh. I love my clamscan -r