this post was submitted on 21 Jan 2025
480 points (98.8% liked)

Linux

49217 readers
332 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 3 points 18 hours ago* (last edited 18 hours ago) (1 children)

We have no control over what they put in those containers

Most games on Steam are proprietary software you don't control to begin with. It seems reasonable to keep them encapsulated in containers (+1 if you run Steam on flatpak or so) rather than granting them the capacity to run amok in the entire system, which we would have even less control over.

It seems contradictory to want to remove barriers that are preventing the software from taking more control, and at the same time complaining about how they are having too much control.

[–] [email protected] 0 points 18 hours ago (1 children)

Most games on Steam are proprietary software you don’t control to begin with

But those are small fries, not "the provider of games"

rather than granting them the capacity to run amok in the entire system

WDYM?

  1. we don't run games as root
  2. we are speaking about Wine, so what they see is limited to WINEPREFIX
[–] [email protected] 2 points 17 hours ago* (last edited 15 hours ago)

But those are small fries, not “the provider of games”

They have less to loose, then. That's just as dangerous, if not more.

I'm a small fry too, would you run a binary I send you without any form of sandboxing?

we don’t run games as root

No, we typically run them with the same user that stores all our useful private data and that we typically type our passwords with.

Also, why are you OK with that level of sandboxing? don't you want more "control"? You say containers are bad, but using user roles to protect parts of the system is ok? why are you not running all as root if you want "control"?

we are speaking about Wine, so what they see is limited to WINEPREFIX

Not really, by default you have access to other drives (Z:\ being /, the fs root), wine is not a perfect sandbox, it's not designed for that.. and if you actually did want it to become one (which ultimately would also lead to a need for memory separation to fight memory-leak attacks) then it would not be that different from what's being pursued. You'd be essentially building the container in a custom version of wine shipped by Valve on Steam, it does not make any difference in terms of "control".