Can i isolate software like this?

I need to use some prorprietary app for electronic signature of documents. The app installs some kind of certificate for identification on my PC. They have software for Windows, mac and linux.

Is it a good idea if i create a separate user on my Ubuntu pc to isolate this software? For example when i boot my pc i will be prompted with 2 users to login just like on Windows.

Could the software affect my other user and/or the firmware?

Is it a good idea if i create a separate user on my Ubuntu pc to isolate this software? For example when i boot my pc i will be prompted with 2 users to login just like on Windows.

I don’t think that this would be enough since, it will install it in the root space.
You could try a second user (without sudo) and install it in the FLATPAK user space.
If this isn’t an option I would suggest a Virtual machine.

Depending on what kind of certificate it installs[1] (eli5) & usecases it enables, you could sandbox it (someone mentioned using Flatpak) or isolate it (a new user works) or leave it as-is.


  1. Could be a Private PKI, in which case it is OK. ↩︎