[SOLVED] Chromium won't start; sandbox missing SUID perm

[cpoakes]

The Porteus v2.1 chromium package (chromium-25.0.1323.1-i686-1sl.xzm) will not start. From the command line, the error message is:

The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /usr/lib/chromium/chromium_sandbox is owned by root and has mode 4755.

Inspection shows that /usr/lib/chromium/chromium_sandbox does NOT have SUID (4755) perms.

The error was verified from base only, no magic and no rootcopy using 003-lxde.xzm. Chromium was activated by hand from a root console. Inspection (before installing cups dependency) shows that /usr/lib/chromium/chromium_sandbox indeed is not installed with correct permissions. I note that the script in /var/log/scripts has a chmod 4755... but it is apparently not executed.

Work around:

Code: Select all

sudo chmod 4755 /usr/lib/chromium/chromium_sandbox

or launch chromium with:

Code: Select all

chromium --no-sandbox

[wread]

Try this version. It works for me!

Regards!

[brokenman]

Where are you downloading these porteus packages from?

In the official porteus repo (using porteus package manager) the i486 version is chromium-28.0.1497.1-x86_64-5sl and is tested as working on my machine.

[cpoakes]

Ciao Brokenman

In my PPM, this is the repo:
PREPO=http://ponce.cc/porteus/i486/modules-14.0

And while the x86_64 version at this location is v28, the i486 (labeled i686) version there is most certainly not. At this very moment the PPM is still offering v25. Oh no! Now there are two bugs... a broken version and a wrong version.

I will be glad to retest and close if when v28 gets uploaded.

[brokenman]

I apologise. After checking the PACKAGES.TXT from the server file I see you are correct. I will update the repo shortly.

[brokenman]

Updated the 32bit repo. Please test when you get a chance.

[cpoakes]

This is still broken brokenman. The message remains:

The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /usr/lib/chromium/chromium_sandbox is owned by root and has mode 4755.

ls -l is:

-r-xr-xr-x 1 root root 14K Aug 22 09:08 /usr/lib/chromium/chromium_sandbox

There is an appropriate looking chmod 4755 in the script named
var/log/scripts/chromium-29.0.1547.57-i486-1sl ; I don't know why it doesn't work. Module was both tried using "activate" from optional, and starting from modules.

[brokenman]

I've manually chmod'd the sandbox in the package. In future packages I will add a startup script that should ensure the permission upon activation.

[wread]

@cpoakes
do as I said and you will enjoy chromium.....

[cpoakes]

Thanks brokenman, the version from the repository is operating correctly.