Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Errors in Ubuntu 24.04 #974

Open
GarboMuffin opened this issue Apr 25, 2024 · 1 comment
Open

Errors in Ubuntu 24.04 #974

GarboMuffin opened this issue Apr 25, 2024 · 1 comment
Labels

Comments

@GarboMuffin
Copy link
Member

GarboMuffin commented Apr 25, 2024

namespace stuff might affect us depending on how it gets installed

https://discourse.ubuntu.com/t/noble-numbat-release-notes/39890#unprivileged-user-namespace-restrictions-15

@GarboMuffin GarboMuffin changed the title Test in ubuntu 24.04 Errors in Ubuntu 24.04 Apr 27, 2024
@GarboMuffin
Copy link
Member Author

GarboMuffin commented Apr 27, 2024

On a fresh Ubuntu 24.04:

  • Snap Store: Works
  • Apt repository: Works
  • Flathub: Works
  • AppImage: Had to manually apt install libfuse2t64. Works when started from Files but not Terminal.
  • tar.gz: Works when started from Files but not Terminal.

No idea why it's different in Files or Terminal.

The error looks like:

[3592:0426/221330.463740:FATAL:setuid_sandbox_host.cc(158)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /home/vmuser/Downloads/TurboWarp-linux-x64-1.11.1/chrome-sandbox is owned by root and has mode 4755.
Trace/breakpoint trap (core dumped)

Temporary fix (until reboot) is to run sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 (enables using namespaces without root; has a history of security problems) or start app with --no-sandbox (disables Chromium sandbox; extensions still can't access things like Node.js directly but in theory a V8 security bug could let them escape without needing to also escape a reasonably secure sandbox)

This is an upstream problem that other projects also have so I'll just wait and see what other projects do in response electron/electron#41066

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant