Don't want to see articles from a certain category? When logged in, go to your User Settings and adjust your feed in the Content Preferences section where you can block tags!
Paranoid gaming [Security]
ntfwc Dec 27, 2014
Not long ago I was migrating my server programs to dedicated user accounts, to help minimize their privileges. And one of these servers had a GUI part to it, so I had to figure out how to give a program, run as another (system) user, access to the X session. Then it dawned on me, why can't I do this with games? I had thought about creating a different account specifically for games, but I didn't really want to have to switch accounts for that. Plus I might want to talk to people while playing.

So, I jumped on my laptop, and made the attempt. I got one game running, but there were a few things I still had to figure out: how to grant access to GPU acceleration (add to the video group) and how to forward sound (paprefs > enable network access, PULSE_SERVER=localhost). Eventually I put together a reliable script to launch games as other users, and I didn't notice any performance impact. Going even further, I removed file permissions for "other", restricted access to UID changing programs, and I added special firewall rules for users, so I had one user for offline games without internet access and one that had internet access, with some local access restrictions.

This was fair bit of work, but I actually thought it was rather fun. And there were other benefits, like teaching me how to apply the same isolation to programs like web browsers.

Do any of you practice some form of game software isolation?

Update 03/07/15

For anyone who might have been interested, I have now posted the scripts I'm using on Github: https://github.com/ntfwc/sudo-x
While you're here, please consider supporting GamingOnLinux on:

Reward Tiers: Patreon. Plain Donations: PayPal.

This ensures all of our main content remains totally free for everyone! Patreon supporters can also remove all adverts and sponsors! Supporting us helps bring good, fresh content. Without your continued support, we simply could not continue!

You can find even more ways to support us on this dedicated page any time. If you already are, thank you!
Login / Register


Or login with...
Sign in with Steam Sign in with Google
Social logins require cookies to stay logged in.