Allow wine to work

Author: bjorn3

.github/workflows/main.yml

@@ -121,6 +121,7 @@ jobs:
         mkdir wine_shims
         rustc patches/bcryptprimitives.rs -Copt-level=3 -Clto=fat --out-dir wine_shims --target x86_64-pc-windows-gnu
         echo "WINEPATH=$(pwd)/wine_shims" >> $GITHUB_ENV
+        wine echo || true # create ~/.wine to ensure wine works even when the build system is restricted using landlock
 
     - name: Build
       run: ./y.sh build --sysroot none

build_system/landlock.rs

@@ -49,6 +49,15 @@ pub(super) fn lock_build(cargo: &Path, frozen: bool) {
             &[env::current_dir().unwrap().join("build"), env::current_dir().unwrap().join("dist")],
             access_all,
         ))
+        .unwrap()
+        .add_rules(path_beneath_rules(
+            &[
+                #[allow(deprecated)]
+                &std::env::home_dir().unwrap().join(".wine"),
+                Path::new("/run/user/"),
+            ],
+            access_all,
+        ))
         .unwrap();
 
     let ruleset = if frozen {