What I’m Looking To Achieve:
Still newer to Linux, permissions is one of those things that screws with my head a lot still. What I am looking to do is, setup a new user on my system, and give it the bare minimum privileges specifically to play games. Therefore, those games and proprietary clients could not access any of my other files in certain cases. I understand an isolated system would be the best bet, but I do not have the hardware currently to do that. I figure a restricted user is better than none.
What The Restricted User Should Be Ideally:
The restricted user should only have access to the files it needs to run, it would need to be able to download clients (Lutris, Steam, Origin, etc), not be able to access all the files my main account can, be able to use stuff like WINE and Proton, and not be sandboxed/jailed.
My current setup is:
- OS: Artix Linux x86_64
- Kernel: 5.6.19.a-1-hardened
- WM: bspwm
I’d appeciate some slight handholding on this, as I said I am still new and learning and permissions is something that still confuses me greatly and I have not dealt with it much. I’m quite honestly not sure where to even start with all this, as I’m not sure what I would give the new user access too and wouldn’t as far as system files, would I add it to the sudoers group because otherwise it can’t download stuff correct? Is it not concerning that it would have access to use sudo defeating the purpose of the permissions? And I’m sure there’s other stuff I’m not even thinking of that I would run into when trying to do this. Would definitely appreciate help. If you have any questions, feel free to ask away. Thanks! :penguin:
try this https://gist.github.com/kasunbg/5502cb630429819d07b5dc0cfa26813c
$ xhost + zsh: command not found: xhost
hmmm…
LOL. On Void there is a package called
xhost
which provides the binary.https://www.archlinux.org/packages/extra/x86_64/xorg-xhost/
This maybe? It’s not installed by default though.
if anyone else has any ideas, feel free to step in. Haven’t tried this yet.
Am still looking for input here if anyone has any to offer.