[wao0uuno]

Running games on Linux via Proton provides some isolation. It’s not technically a proper sandbox though.

[parasense]

Proton is just emulation, and it will happily expose the underlying host system to the running game software. In particular the filesystem and some peripheral devices. However, Valve is moving towards sandboxing in Steam. You can already run the whole thing with a flatpak sandbox, and valve themselves are using ostree. With srvio is possible to run the whole thing in a throwaway windows vm while the graphics card is passed through

[sophrosyne42]

This is why it was foolish to give a new name to it. It was originally called Wine Is Not an Emulator.

[zufallsheld]

It's not a new name. Proton is Valve's fork of wine. They also contribute patches to wine.

[unethical_ban]

I think their point is proton is not an emulator.

[tazard]

P. I. N. E. from here on out then

[q3k]

You can just use Linux syscalls from an .exe executed by Wine. There is no sandboxing.

https://gist.github.com/q3k/e5952111283ea59ee78a7699919a055b

[SuperNinKenDo]

Anything that wants to traverse your filesystem could do so trivially from a wineprefix, but stuff like sniffing your browser extensions might be harder depending on the technique.