Integrate sandbox system in steam
@ekaris I think you mean the chromium sandbox?
No, that's the browser sandbox, what I was referring to is running steam in a sandbox and all its games in a sandbox for example like with firejail - it has upstream support for steam.
"Other vulnerabilities that are favorite attack vectors? The personal devices employees bring into the office on which they’ve allowed their kids to load Steam games, and which the workers then connect to the network."
Rob Joyce (TAO, NSA) just said Steam games are a security threat #enigma2016
http://www.wired.com/2016/01/nsa-hacker-chief-explains-how-to-keep-him-out-of-your-system/
There are multiple solutions in my opinion:
- A verified flatpak
- Upgrading the current CEF sandbox similar to base chromium (might require upstream work):
Personally I prefer solution 1. since it is fastest to implement since CEF development is so slow they don't even support Wayland natively yet.
Nothing extracted yet.
It is a good idea to have sandbox implemented on steam client