protonscr

Steam SHOULD NOT demand user-namespace

steamclosed
ValveSoftware/steam-for-linux#11238 · opened 2024-09-04 by sipaktli · updated 2025-11-04 · 1 comments · github
Ssipaktli 2024-09-04 github

Recently you have started to demand the use of unprivileged namespaces (UNs) without providing any technical rationale for it.

You have provided the following link as a justification, but what is says is basically "modern systems use flatpak so it must be cool". That is not a valid technical reason.
https://github.com/ValveSoftware/steam-runtime/blob/master/doc/steamlinuxruntime-known-issues.md#kernelunprivileged_userns_clone

  1. The runtime has been running fine thus far without requirement for unprivileged namespaces, so I still fail to see why it is randomly necessary now.
  2. Now, that's the runtime, but why should the native client require UNs???

The use of UNs leaves the system vulnerable to a plethora of vulnerabilities. The extent of which being so that it does not justify you requirement.

Basically you have gone the nuclear option, and I will assume malicious intent unless you can provide a valid technical justification.ac

Kkisak-valve maintainer 2024-09-04 github

Hello @sipaktli, please do not intentionally open duplicate issue reports. You were given a straight answer that there is an alternative available by using a setuid-root variant of bwrap on #11237. If you have further concerns with bwrap, then direct that feedback at the upstream bubblewrap project.

If you want bwrap to work differently on a technical level, then work with that project to meet your needs. Convenience link: https://github.com/containers/bubblewrap

Closing as a duplicate of #11237.

Nothing extracted yet.