the simple solution would be to put every game into a sandbox by default
Every program ideally should be in a sandbox and if it wants permission to access something it should have to ask for it.
Kind of like Android or iOS.
Flatpak tries to accomplish this on Desktop, and it works, but isn’t as comprehensive as something like Android or iOS.
On the extreme side, there is QubesOS, which runs every app in a dedicated virtual machine, including the networking stack.
I’ve never seen a flatpak prompt me for permissions. If it needs something it didn’t have it just silently fails for me and I have to guess what permission it needed manually using flatseal. Is that normal or am I setup wrong?
That’s normal.
Its also the most annoying as fucking problem…
Is that what proton does on Linux?
Those are my favourite type of game.
/s
And compaines wonder why we have trust issues.
Joke’s on them. I just put games in my library and never install them.
That’s the horror part. It’s part of the immersion.
Well, that’s pretty horrifying.
When is valve removing windows 11?
Isn’t that exactly what SteamOS is doing?
They can’t. It’s not sold through Steam.
“Valve removes free game”
What? Why are they removing free games??? Oooooh, they must want you to pick the paid games…
“after players discover it contains malware that steals your data”
Oh. Well that’s a very good reason to remove it. Thanks Valve!
Nothing’s free in Waterworld.
Once wasm 64 bit deploys more, we should migrate as much as possible to it.
That at least will make it harder to access random files and keys from disk due to the sandboxing.
Sandbox escapes are still possible, but that’s an additional level of control we can enforce.
They had to do one thing…
laughs in proton
Proton does not protect you from harm. It’s not a sandbox.
No but it also doesn’t have windows on the other side, someone would have to target a proton setup to get much of anything.
Ye no. If i made malware for windows that goes over all reported drives wine will just happily translate that. Hell, by default wine will map root as z: so no, wine/proton will not help.
Even wannacry was able to cause some damage to linux if ran through wine
Why wouldn’t they? Linux is gaining market share.
Yeah, it’s slowly gaining market share, but it’s still a minuscule size of the user base
what about bazzite set to immutable?
