In the default installation of Steam on the Steam Deck, almost every file under the Steam directory has all three executable bits set (u,g,o), including files that are data-only like steam_subscriber_agreement.txt. These files should not need the executable bits set, and their presence creates an unnecessary (albeit small) security risk.
OS Version: 3.7.19
Steam Version: 1769025840
Example:
$ ls -l ~/.local/share/Steam
total 455464
drwxr-xr-x 5 deck deck 4096 Jan 24 20:56 appcache
drwxr-xr-x 3 deck deck 4096 Dec 23 15:55 bin
-rw-r--r-- 1 deck deck 409015576 Dec 23 15:54 bootstrap.tar.xz
drwxr-xr-x 5 deck deck 4096 Jun 3 2025 clientui
drwxr-xr-x 4 deck deck 4096 Dec 24 20:47 compatibilitytools.d
drwxr-xr-x 6 deck deck 4096 Jan 24 22:32 config
drwxr-xr-x 5 deck deck 4096 Dec 23 15:55 controller_base
drwxr-xr-x 2 deck deck 32768 Jan 24 16:17 depotcache
-rwxr-xr-x 1 deck deck 939 Jun 3 2025 fossilize_engine_filters.json
drwxr-xr-x 2 deck deck 16384 Dec 23 15:55 friends
-rwxr-xr-x 1 deck deck 1551512 Jan 21 09:19 GameOverlayRenderer64.dll
-rw-r--r-- 1 deck deck 0 Dec 4 19:02 gpu-trace.log
drwxr-xr-x 3 deck deck 65536 Dec 23 15:55 graphics
-rw-r--r-- 1 deck deck 26625 Jan 24 15:10 installscriptevalutor_log.txt
drwxr-xr-x 2 deck deck 4096 Jan 24 15:10 legacycompat
drwx------ 2 deck deck 4096 Jan 22 17:12 linux32
drwxr-xr-x 2 deck deck 4096 Jan 22 17:12 linux64
-rwxr-xr-x 1 deck deck 1193 Dec 4 19:03 local.vdf
drwxr-xr-x 2 deck deck 4096 Jan 24 01:41 logs
drwxr-xr-x 2 deck deck 4096 Jan 24 22:32 package
drwxr-xr-x 3 deck deck 20480 Jan 22 17:12 public
drwxr-xr-x 7 deck deck 28672 Dec 23 15:55 resource
-rw-r--r-- 1 deck deck 87 Jan 18 11:57 standalone_installscript_progress_228980.vdf
drwxr-xr-x 4 deck deck 4096 Jun 3 2025 steam
drwxr-xr-x 9 deck deck 4096 Jan 24 20:55 steamapps
-rwxr-xr-x 1 deck deck 25543832 Jan 21 09:19 steamclient64.dll
-rwxr-xr-x 1 deck deck 20809880 Jan 21 09:19 steamclient.dll
-rw------- 1 deck deck 857 Aug 15 2024 steamdeps.txt
-rwxr-xr-x 1 deck deck 2000 Apr 1 2024 steam_msg.sh
drwxr-xr-x 4 deck deck 4096 Jun 3 2025 steamrt64
-rwxr-xr-x 1 deck deck 26224 Jun 11 2025 steam.sh
-rwxr-xr-x 1 deck deck 49827 May 31 2018 steam_subscriber_agreement.txt
drwxr-xr-x 8 deck deck 4096 Jan 22 17:12 steamui
drwxr-xr-x 3 deck deck 4096 Jun 3 2025 tenfoot
-rwxr-xr-x 1 deck deck 8886326 Jun 26 2025 ThirdPartyLegalNotices-Chromium.html
-rwxr-xr-x 1 deck deck 382 Jun 26 2025 ThirdPartyLegalNotices.css
-rwxr-xr-x 1 deck deck 30208 Jun 27 2025 ThirdPartyLegalNotices.doc
-rwxr-xr-x 1 deck deck 148835 Nov 20 10:20 ThirdPartyLegalNotices.html
drwx------ 6 deck deck 4096 Jan 22 17:12 ubuntu12_32
drwxr-xr-x 5 deck deck 4096 Jan 22 17:12 ubuntu12_64
-rwxr-xr-x 1 deck deck 1186 Jan 22 20:32 update_hosts_cached.vdf
drwxr-xr-x 3 deck deck 4096 Dec 4 19:03 userdata
In the default installation of Steam on the Steam Deck, almost every file under the Steam directory has all three executable bits set (u,g,o), including files that are data-only like
steam_subscriber_agreement.txt. These files should not need the executable bits set, and their presence creates an unnecessary (albeit small) security risk.OS Version: 3.7.19
Steam Version: 1769025840
Example: